84
IBM Tivoli Access Manager for e-business 5.1 GA30-2206-00

IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

  • Upload
    ngominh

  • View
    229

  • Download
    0

Embed Size (px)

Citation preview

Page 1: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

IBM Tivoli Access Manager for e-business

���� ��

�� 5.1

GA30-2206-00

���

Page 2: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker
Page 3: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

IBM Tivoli Access Manager for e-business

���� ��

�� 5.1

GA30-2206-00

���

Page 4: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�!

� ��� � ��� ���� ��� ���� ��, ��� 63 ���� �� B ������� �����.

��(2003� 11�)

� ���� � ���� ��� ���� �� �, IBM Tivoli Access Manager(�� �� 5724-C08)� �� 5, ��� 1, ��

�� 0 � �� �� ���� ����� �����.

© Copyright International Business Machines Corporation 1999, 2003. All rights reserved.

Page 5: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

��

�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii

� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii

� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii

��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix

�� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x

�� �� ���. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

��� �� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

�� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

����� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

� �� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

���� �� �� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

� 1 � � ���� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

CD �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

IBM Tivoli Access Manager� ����� ���� ��� . . . . . . . . . . . . . . . . . . . 4

� 2 � ��� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

���� ����� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

IBM Tivoli Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

OS/390� IBM Security Server . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

IBM z/OS Security Server LDAP Server . . . . . . . . . . . . . . . . . . . . . . . 10

Lotus Domino . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Microsoft Active Directory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Netscape iPlanet � Sun ONE Directory Server . . . . . . . . . . . . . . . . . . . . . 11

Novell eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

��� �� � ��� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Tivoli Access Manager �� ��� . . . . . . . . . . . . . . . . . . . . . . . . . 13

Tivoli Access Manager �� ��� . . . . . . . . . . . . . . . . . . . . . . . . 14

���� ���(�� �� ��) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

���� ���� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

� 3 � ��� ��� � ���� �� . . . . . . . . . . . . . . . . . . . . . . . . . 25

�� � ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Active Directory� �� Windows 2003 ���� �� ���� ���(44369) . . . . . . . . . . . 25

�� ���� LDAP ��� Plug-in for Web Server� � SSL �� ���� � (44336) . . . . . 25

�� ���� �� ��� Active Directory ����� ���(44046) . . . . . . . . . . . . . . 25

Tivoli Access Manager� ��� AIX®� ��� JRE �� 1.3.1.5 ��� ���� ��� �(41082) 26

© Copyright IBM Corp. 1999, 2003 iii

Page 6: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� ���� ��� � JDK 1.3.1� Red Hat Enterprise Linux 3�� ���(40973, 43956) . . . . . 26

Tivoli Access Manager Java Runtime Environment javadocs� ���� Access Manager Runtime ��

�� ���� ��� �(43895) . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Web Portal Manager� ���� IBM Java Runtime Environment 1.3.1� ��(44178) . . . . . . 26

WebSphere Application Server ���� �� ��� ��(44432). . . . . . . . . . . . . . . 26

�� WebSEAL ��� ������ libcdmf.* ��� ��� � � (44079). . . . . . . . . . . 27

�� � ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

�� ���� zSeries®� Red Hat Enterprise Linux 3.0�� ���(42163) . . . . . . . . . . . . 27

Windows 2000� ��� � Java Runtime Environment� �� � � (43948) . . . . . . . . . . 28

�� ��� �� �� �� � Policy Server �� ��(43906) . . . . . . . . . . . . . . . 28

2��� ��� �� ���� �� ��� ��� ���� ���� � (37601, 39896, 43907) . . . . 28

�� ���� ��� Windows� Web Portal Manager� ��� � �� ��� ��(44045) . . . . 28

�� �� ibmjcaprovider.jar �� �(44323) . . . . . . . . . . . . . . . . . . . . . . 28

Microsoft Active Directory �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Active Directory �� �� � �� �� . . . . . . . . . . . . . . . . . . . . . . 29

Active Directory� ��� � ″�� � ��� ��″ �� . . . . . . . . . . . . . . . . . . 29

Policy Server �� � Windows 2003 Active Directory� ����� ��� � �� �� ��� �

�� ��� � � (43908) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Windows 2000 ����� �� ����� �� ����� ��� � ���� � (36389) . . . . . . 29

iPlanet Directory Server �� Sun ONE Directory Server �� . . . . . . . . . . . . . . . . . 30

iPlanet ����� � �� ��(14785) . . . . . . . . . . . . . . . . . . . . . . . . 30

iPlanet �� �� �� � ��� �� . . . . . . . . . . . . . . . . . . . . . . . . 31

ONE Directory Server 5.2��� pdunconfig� ��� ��� � � (40621) . . . . . . . . . . . 31

Web Portal Manager �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

AIX 5.1�� Web Portal Manager GUI ��� . . . . . . . . . . . . . . . . . . . . . 32

�� ���� � ��� Policy Proxy Server� ���� � (30100 � 30128) . . . . . . . . . 32

ACL ��� ��� ��� ��(29961) . . . . . . . . . . . . . . . . . . . . . . . 33

Web Portal Manager� �� ������ ��� � � (43847) . . . . . . . . . . . . . . . 33

WebSEAL ��. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Active Directory(AD_LDAP)�� �� �� WebSEAL� �� � � (43684). . . . . . . . . 33

��� �� ID ���� � � ���� � (IY30623, IY21308) . . . . . . . . . . . . . . 33

Solaris�� WebSEAL� SSL �� �� �(43387) . . . . . . . . . . . . . . . . . . . 34

�� ���� ��� Red Hat Linux 3.0�� WebSEAL� �� . . . . . . . . . . . . . . 34

Linux ����� WebSEAL� �� � �� ���� ��(44078). . . . . . . . . . . . . . 34

�� ���� ″� ��� �� ��″��� ���� � (44086) . . . . . . . . . . . . . . . 35

�� ��� �� �� ��� ���� � � � (44083) . . . . . . . . . . . . . . . . 35

�� � �� �� ��� �� �� ���� � (44084) . . . . . . . . . . . . . . . . . 35

��� ��� ���� ����� ��(44088) . . . . . . . . . . . . . . . . . . . . 35

�� ���� �� BASE HREF ��� ���� � (44090) . . . . . . . . . . . . . . . 35

WebSEAL ��� ���� ���(44095) . . . . . . . . . . . . . . . . . . . . . . . 36

��� ����� wsadmin ������ �� WebSEAL �� ���� �(44100) . . . . . . . . 36

AMWebARS � �� ����� �� �� �� � � �� �� ��� ��(44134) . . . . . . 36

Active Directory� �� ���� �� � ��� WebSEAL� �� � � (44386) . . . . . . 37

WebSEAL� ��� ���(44082) . . . . . . . . . . . . . . . . . . . . . . . . . . 37

��� ���� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

�� ���� URL� Explorer �� ��� ���� � (37028) . . . . . . . . . . . . . . . 37

iv IBM Tivoli Access Manager for e-business: ���� ��

Page 7: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

��� ��� ��� � ��� �� ��� ��� ���� �� (39896) . . . . . . . . . . 37

���� ��� �� ��� FSSO(Forms Single Sign-On)� � ���� � (39924) . . . . . . . 38

Windows ��� ������ ����� �� �� � � �� ID� ��� Service Unavailable

��� ���(42351) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

SPNEGO ��� Active Directory ���� �� ���� ������ �� �(41078) . . . . . . . 38

Microsoft IIS Plug-in�� ������� �� pdwebpi.conf �� ��(44361) . . . . . . . . . . . 38

�� �� ���� �� URL� ��� � (44209) . . . . . . . . . . . . . . . . . . 39

Apache Web Server �� � �� ��� ���� � ���� � � (44273, 44286) . . . . . . 39

IBM Tivoli Directory Server �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

zSeries� Linux� IBM Tivoli Directory Server �� 5.2 ��(44406) . . . . . . . . . . . . . 39

pdadmin� � �� � Directory Server� �� ��� Tivoli Access Manager ��� ���� �

(43951) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

SSL� ��� �� �� LDAP Server � ���� ��� �(18832) . . . . . . . . . . . . 40

pdadmin object delete � � ����� ��� � � (27173) . . . . . . . . . . . . . . . 40

��� � �� � � �� ��� ��� � � (24411) . . . . . . . . . . . . . . . . . 41

LDAP��� ���� �� ���� ��� Policy Server �����(28114) . . . . . . . . . 41

��� ��� ��� � Windows�� Policy Server � Authorization Server� ���� � (IY34142) . . 41

Tivoli Access Manager �� 5.1� �� ���� ��� Java ������ ��� ��(24996) . . . 42

Solaris��� Policy Director ������ �� ��� � . . . . . . . . . . . . . . . . 42

AIX�� ���� ����� �� �� . . . . . . . . . . . . . . . . . . . . . . . . 42

��� ��� �� IBM HTTP Server ��� ����(19559) . . . . . . . . . . . . . . . 43

HTTP �� ���� ��� ��� � �(20633, 20631, 20735). . . . . . . . . . . . . . 43

WebSphere Application Server� Tivoli Access Manager� �� ��� HP-UX�� ���� �

(28015) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

� �� ���� BEA WebLogic Server� �� � � . . . . . . . . . . . . . . . . . . 44

Microsoft �� �� �� � Policy Server ��� ��� � � (43306) . . . . . . . . . . . . 45

Microsoft Internet Explorer� �� ��� � ��� � � � � �� � ���(43398) . . . . . 45

Authorization Server(pdacld)� �� �� ��� ��(43511) . . . . . . . . . . . . . . . . . 45

Windows ���� � �� �� ��� ��� WebSphere Application Server� Tivoli Access

Manager� �� �� � � ���� ��� ���� � (43612) . . . . . . . . . . . . . 46

�� �� �� �� � � �� ��� �� ��� Tivoli Access Manager Java Runtime

Environment� ��� ��(43896) . . . . . . . . . . . . . . . . . . . . . . . . . 46

Tivoli Access Manager Runtime Environment �� � � � �� �� ���� �(43904) . . . 46

Tivoli Access Manager� �� �� � �� ���� ���� �� � � (43933) . . . . . . . . 46

SvrSslCfg ��� � � � �� �� ���� ��(43701) . . . . . . . . . . . . . . . 47

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server(pdmgrd) �

Authorization Server(pdacld)� ��� ���(36687, 37558) . . . . . . . . . . . . . . . . . 48

Tivoli Access Manager for WebSphere Application Server ����� ��� ����� �����

� ��� � � (28418) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

WebSphere Application Server��� ����� �� ��(21935) . . . . . . . . . . . . . . 48

�� ���� � Tivoli Access Manager ���� ��� �� ����� ��� ���(43748) . . . 49

����� ��� ACL� ������ ��� �� ���(44245) . . . . . . . . . . . . . . 49

����� ��� policy� ������ ��� ���(44410) . . . . . . . . . . . . . . . 50

UNIX �� ����� pdbackup � � ��� � �� ���� �� (44285) . . . . . . . . . . 50

pdwascfg �� � jlog.properties ��� ���� � (44410) . . . . . . . . . . . . . . . . 50

�� v

Page 8: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

zSeries� Linux� WebSphere Application Server ��� ���(44540) . . . . . . . . . . . . . 50

Tivoli Access Manager� �� ��� � ��� Java ������ �� � NoSuchMethodErrors�

�� � � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

� 4 � ��� �� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

�� �� � ��� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Red Hat Linux 7.1� �� �� �� ��� �� �� ���� . . . . . . . . . . . . . . 53

Active Directory� ���� DBCS ����� �� �� �� � � (44415, 44312) . . . . . . . 53

Linux ������ ��� ��� � �� ��� �� . . . . . . . . . . . . . . . . . . 53

Linux ����� �� ���� ��� �� ����. . . . . . . . . . . . . . . . . . . . 54

�� ���� �� ���� � � ���� � (28420, 28422) . . . . . . . . . . . . . . . 55

�� ��� ��� ��� ���� ���� ��(28453). . . . . . . . . . . . . . . . . . 55

Windows� ��� LANG ��� ���� ��� ��� �� . . . . . . . . . . . . . . . . 55

� ��� Windows ���� ��� �� ���� ��� ��(26899) . . . . . . . . . . . 55

�� ��� ASCII ��� � �� ��(26985) . . . . . . . . . . . . . . . . . . . . 55

Web Portal Manager� ���� �� ���� �� ��� �(IY32306) . . . . . . . . . . . 56

Java� �� � � ���� � �� ��(IY31894) . . . . . . . . . . . . . . . . . . 56

Policy Server� AIX �� � ��� ���(12584) . . . . . . . . . . . . . . . . . . . . 56

2��� ��� �� ���� �� ��� ��� ���� ���� � (37601, 39896, 43907) . . . . 56

��� ��� ��� � ��� �� ��� ��� ���� �� (39896) . . . . . . . . . . 56

��� Windows ����� Plug-in for Web Server� �� ���� ���(44565) . . . . . . . . . 56

����� � �� ���� ��� � ������� � � ���� � (44080). . . . . . . . . 57

BEA WebLogic ��� ��� � �� ���� ��� ���� ��(44219, 44398) . . . . . . . . 57

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server(pdmgrd) � ACL

��(pdacld)� ��� ���(36687, 37558) . . . . . . . . . . . . . . . . . . . . . . . 57

� 5 � ��� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

IBM Tivoli Access Manager Upgrade Guide . . . . . . . . . . . . . . . . . . . . . . . 59

IBM Tivoli Access Manager Base Administration Guide . . . . . . . . . . . . . . . . . . . 59

IBM Tivoli Access Manager for e-business Authorization C API Developer Reference . . . . . . . . 59

IBM Tivoli Access Manager for e-business Administration C API Developer Reference . . . . . . . . 60

�� A. Linux�� Tivoli Access Manager ������ ��� ��� � . . . . . . . . . . . . . 61

�� B. ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

vi IBM Tivoli Access Manager for e-business: ���� ��

Page 9: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

��

IBM® Tivoli® Access Manager for e-business ���� ��� �� � � ��

���. � ���� IBM Tivoli Access Manager for e-business, �� 5.1�� �

� ��� �� ��� �����.

Tivoli Access Manager� IBM Tivoli Access Manager ���� ������

��� � �� �� ��������. � ��� IBM Tivoli Access Manager

������ ��� ��� �� � � �� ��� �����. �� ��

�� ���� �� ��� e-business ������ �� ���� � �����

�� policy� �� ����� ���� ��� �� �� ��� �����.

�: IBM Tivoli Access Manager� �� Tivoli SecureWay® Policy Director� �

�� ����. Tivoli SecureWay Policy Director ����� � ���� �

�� �� ��� ���� Policy Server�� ����.

IBM Tivoli Access Manager� ��� , �����/��, MQSeries® � ���

�� ������ �� ��� �� �����. Tivoli Access Manager �

�� ��� ��� �� � �� �� �� ���� ���� ��� � ��

���. �� ��� �� ������ �� Tivoli Access Manager� ��� �

�� ���� ��� � �� ���� �� ������ �����.

�� ����� �� � ��� �� ��� �� �� ��� ���� ��

��� ��� � ���.

��: ���� �� ��� ��� ��� ���� ����. � ��� �� �

� ��� �� �� ��, ���� � ��� �� ��� TechNotes �

��� ������.

� �� ���

� �� Tivoli Access Manager� ��, �� � ��� ���� ��� ���

���� ���.

��� � � � � �� ��� ���.

v UNIX® � ��

v HTTP, TCP/IP, FTP, Telnet, SSL� ��� ��� ���

v �� ��

v ��

© Copyright IBM Corp. 1999, 2003 vii

Page 10: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

v ��

v IBM Tivoli Access Manager ��

v LDAP(Lightweight Directory Access Protocol) � ��� ���

� �� ��

� �� � � �� ���� ����.

v 1 ���� � 1 � �� ���� �� ���

v 7 ���� � 2 � ���� ����

v 25 ���� � 3 � ��� �� � ��� ��

v 53 ���� � 4 � ��� �� �����

v 59 ���� � 5 � ��� �� ���

�� ��

�� �� ��� ��� ���� Tivoli Access Manager �����, �� ��

� � � � �� �� ��� ����. �� �� ��� � ��� �� ��

�� �� ����� ������.

IBM Tivoli Access Manager for e-business �� �� �� � ��� � �

� �� � ����.

http://www.ibm.com/software/tivoli/products/access-mgr-e-bus/

Tivoli Access Manager ������ � � �� ���� ����.

v ���� ���

v ix ���� ��� ���

v ix ���� � �� ���

v x ���� ��� ����

v xi ���� ��� �� ����

��� ��

v IBM Tivoli Access Manager for e-business Read This First(GA30-2205-00)

Tivoli Access Manager �� � ����� �� ��� �����.

v IBM Tivoli Access Manager for e-business ���� ��(GA30-2206-00)

����� ����, �� � �� �� � �� ����� �� �� ��� �

����.

viii IBM Tivoli Access Manager for e-business: ���� ��

Page 11: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� ��

v IBM Tivoli Access Manager �� �� ���(SA30-2207-00)

Web Portal Manager ������ ��� Tivoli Access Manager �� ���

��� �� � �� �� � �����. � �� IBM Tivoli Access Manager

for e-business Web Security �� ���� ������, IBM Tivoli Access

Manager for Business Integration � IBM Tivoli Access Manager for Operating

Systems� �� � Tivoli Access Manager ��� �� ���� �� ���

�.

v IBM Tivoli Access Manager Base Administration Guide(SC32-1360-00)

Tivoli Access Manager ��� ��� �� �� � ��� � �����.

pdadmin � � ��� Web Portal Manager ������� ���� ��

� ��� �����.

� �� ��

v IBM Tivoli Access Manager for e-business Web Security �� ���

(SA30-2208-00)

Tivoli Access Manager �� ����� � �� ���� �� ��, ��

� � ����� �����. � �� IBM Tivoli Access Manager �� ��

���� �������.

v IBM Tivoli Access Manager Upgrade Guide(SC32-1369-00)

Tivoli SecureWay Policy Director �� 3.8 �� Tivoli Access Manager� �

� ��� Tivoli Access Manager �� 5.1� ������� �� � ���

��.

v IBM Tivoli Access Manager for e-business WebSEAL Administration

Guide(SC32-1359-00)

WebSEAL� ��� �� ���� �� ���� ��� �� �����

, �� �� � �� �� ��� �����.

v IBM Tivoli Access Manager for e-business IBM WebSphere® Application Server

�� ���(SA30-2209-00)

Tivoli Access Manager� IBM WebSphere® Application Server� ���� �

�� ��, � � �� ����� �����.

v IBM Tivoli Access Manager for e-business IBM WebSphere Edge Server ��

���(SA30-2211-00)

Tivoli Access Manager� IBM WebSphere Edge Server ������ ���

� � �� ��, � � �� ����� �����.

v IBM Tivoli Access Manager for e-business Plug-in for Web Servers Integration

Guide(SC32-1365-00)

�� ix

Page 12: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

��� ����� ��� ��� ��� �� ��, �� �� � �� �

� ��� �����.

v IBM Tivoli Access Manager for e-business BEA WebLogic Server �� ���

(SA30-2210-00)

Tivoli Access Manager� BEA WebLogic Server� ��� �� ��, � �

�� ����� �����.

v IBM Tivoli Access Manager for e-business IBM Tivoli Identity Manager

Provisioning Fast Start Guide(SC32-1364-00)

Tivoli Access Manager � Tivoli Identity Manager� ��� ��� ���� �

� ���� Provisioning Fast Start ��� ��� �� �� � ���

��.

��� ���

v IBM Tivoli Access Manager for e-business Authorization C API Developer

Reference(SC32-1355-00)

Tivoli Access Manager �� C API � Tivoli Access Manager ��� ����

������ ��� Tivoli Access Manager ��� ������ ���

�� � ���� �� � �����.

v IBM Tivoli Access Manager for e-business Authorization Java™ Classes Developer

Reference(SC32-1350-00)

��� API� Java™ �� ��� ��� ������ Tivoli Access Manager

��� ���� �� �� �� �� ��� �����.

v IBM Tivoli Access Manager for e-business Administration C API Developer

Reference(SC32-1357-00)

�� API� ��� ������ Tivoli Access Manager �� ���� �

�� �� � �� ��� �����. � ����� �� API� C ��� �

�����.

v IBM Tivoli Access Manager for e-business Administration Java Classes Developer

Reference(SC32-1356-00)

��� API� Java �� ��� ��� ������ Tivoli Access Manager

�� ���� ���� �� �� �� �� ��� �����.

v IBM Tivoli Access Manager for e-business Web Security Developer

Reference(SC32-1358-00)

CDAS(Cross-Domain Authentication Service), CDMF(Cross-Domain Mapping

Framework) � Password Strength ��� �� �� � ����� ��� ��

���.

x IBM Tivoli Access Manager for e-business: ���� ��

Page 13: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� �� ���

v IBM Tivoli Access Manager for e-business Command Reference(SC32-1354-00)

Tivoli Access Manager� �� ���� � ��� � ����� �� �

�� �����.

v IBM Tivoli Access Manager Error Message Reference(SC32-1353-00)

Tivoli Access Manager�� ���� ���� ��� �� ��� �����.

v IBM Tivoli Access Manager for e-business Problem Determination

Guide(SC32-1352-00)

Tivoli Access Manager� �� �� �� ��� �����.

v IBM Tivoli Access Manager for e-business Performance Tuning

Guide(SC32-1351-00)

IBM Tivoli Directory Server� �� ������ Tivoli Access Manager� �

�� ��� �� �� �� ��� �����.

�� ��

� ���� Tivoli Access Manager ������ ��� ��� �����.

Tivoli Software Library��� white papers, datasheets, demonstrations, redbooks

� announcement letters� �� ��� Tivoli ��� �����. � ����

� Tivoli Software Library� ��� � ����.

http://www.ibm.com/software/tivoli/library/

Tivoli Software Glossary�� Tivoli ������ ��� �� �� ��� ���

� ����. Tivoli Software Glossary� Tivoli Software Library ���

(http://www.ibm.com/software/tivoli/library/)� ��� �� Glossary ���� �

�� �� �����.

IBM Global Security KitTivoli Access Manager� IBM Global Security Kit(GSKit) �� 7.0� �� ��

� �� ��� �����. GSKit� �� ���� �� IBM Tivoli Access

Manager Base CD� IBM Tivoli Access Manager Web Security CD, IBM Tivoli

Access Manager Web Administration Interfaces CD � IBM Tivoli Access Manager

Directory Server CD� ���� ����.

GSKit ���� � ��� ��, ��-��� � � �� �� ���� � �

��� iKeyman � �� ��� gsk7ikm� �����. � ��� Tivoli

Information Center ���� �� IBM Tivoli Access Manager �� ��� �

� ��� � � ����.

�� xi

Page 14: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

v IBM Global Security Kit Secure Sockets Layer and iKeyman User’s

Guide(SC32-1363-00)

Tivoli Access Manager ���� SSL ��� ����� ��� ���� ��

��� �� ��� �� ��� �����.

IBM Tivoli Directory ServerIBM Tivoli Directory Server, �� 5.2� ���� � ��� IBM Tivoli Access

ManagerDirectory Server CD� ���� ����.

�: IBM Tivoli Directory Server� ��� � � ��� ������ ����

�� ��� ����.

v IBM Directory Server(�� 4.1 � �� 5.1)

v IBM SecureWay Directory Server(�� 3.2.2)

IBM Directory Server �� 4.1, IBM Directory Server �� 5.1 � IBM Tivoli

Directory Server �� 5.2� � IBM Tivoli Access Manager �� 5.1� � �

����.

IBM Tivoli Directory Server� �� � ��� � �� �� � ����.

http://www.ibm.com/software/network/directory/library/

IBM DB2 Universal Database™

IBM DB2® Universal Database Enterprise Server Edition, �� 8.1� IBM Tivoli

Access Manager Directory Server CD� ���� IBM Tivoli Directory Server �

����� �� �����. IBM Tivoli Directory Server, z/OS® �� OS/390®

LDAP ��� Tivoli Access Manager� �� ������ ��� �� DB2� �

� �����.

DB2� �� � ��� � �� �� � ����.

http://www.ibm.com/software/data/db2/

IBM WebSphere Application ServerIBM WebSphere Application Server, Advanced Single Server Edition 5.0� ��

�� � ��� IBM Tivoli Access Manager Web Administration Interfaces CD

� ���� ����. WebSphere Application Server� Tivoli Access Manager�

���� � ���� Web Portal Manager ������ IBM Tivoli Directory Server

� ���� � ���� �� �� � � ��� � ��� ���. Tivoli Access

Manager�� IBM WebSphere Application Server �� 2� ��� �� IBM

Tivoli Access Manager WebSphere Fix Pack CD� �����.

xii IBM Tivoli Access Manager for e-business: ���� ��

Page 15: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

IBM WebSphere Application Server� �� � ��� � �� �� � ���

�.

http://www.ibm.com/software/webservers/appserv/infocenter.html

IBM Tivoli Access Manager for Business IntegrationIBM Tivoli Access Manager for Business Integration� ��� ��� � �� �

���, IBM MQSeries® �� 5.2� �� �� ��� IBM WebSphere® MQ �

� 5.3 ���� �����. IBM Tivoli Access Manager for Business Integration

� ��� ������ ��� �� ��� WebSphere MQSeries �����

� ������ ��� ��� ���� ��� � ��� ���. WebSEAL �

IBM Tivoli Access Manager for Operating Systems, IBM Tivoli Access Manager

for Business Integration��, IBM Tivoli Access Manager� ���� ����

� �� � �����.

IBM Tivoli Access Manager for Business Integration� �� � ��� � �

� �� � ����.

http://www.ibm.com/software/tivoli/products/access-mgr-bus-integration/

IBM Tivoli Access Manager for Business Integration �� 5.1� �� �� ��

� Tivoli Information Center ���� ����.

v IBM Tivoli Access Manager for Business Integration �� ���(SA30-1825-01)

v IBM Tivoli Access Manager for Business Integration �� �� ���

(GA30-2064-00)

v IBM Tivoli Access Manager for Business Integration ���� ��(GA30-1827-01)

v IBM Tivoli Access Manager for Business Integration Read This

First(GA30-2063-00)

IBM Tivoli Access Manager for WebSphere Business

Integration BrokersIBM Tivoli Access Manager for Business Integration� ��� ��� � �� IBM

Tivoli Access Manager for WebSphere Business Integration Broker� WebSphere

Business Integration Message Broker, �� 5.0 � WebSphere Business Integration

Event Broker, �� 5.0� �� �� ��� �����. IBM Tivoli Access

Manager for WebSphere Business Integration Broker� Tivoli Access Manager�

��� � � �� �� �� ��, ��� ��� �� � �� ���� ���

�� JMS ��/�� ������ �����.

IBM Tivoli Access Manager for WebSphere Integration Brokers� �� � �

�� � �� �� � ����.

�� xiii

Page 16: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

http://www.ibm.com/software/tivoli/products/access-mgr-bus-integration/

IBM Tivoli Access Manager for WebSphere Integration Brokers, ��� �� �

�� ��� Tivoli Information Center ����� ��� � ����.

v IBM Tivoli Access Manager for WebSphere Business Integration Brokers

Administration Guide(SC32-1347-00)

v IBM Tivoli Access Manager for WebSphere Business Integration Brokers ��

�� ��(GA30-2194-00)

v IBM Tivoli Access Manager for Business Integration Read This

First(GA30-2063-00)

IBM Tivoli Access Manager for Operating SystemsIBM Tivoli Access Manager for Operating Systems� ��� ��� � �� ��

��, �� � ���� ���� � �� UNIX ����� ��� policy �

� � �����. IBM Tivoli Access Manager for Operating Systems�

WebSEAL � IBM Tivoli Access Manager for Business Integration�� IBM Tivoli

Access Manager� ���� ���� � �� � �����.

IBM Tivoli Access Manager for Operating Systems� �� � ��� � ��

�� � ����.

http://www.ibm.com/software/tivoli/products/access-mgr-operating-sys/

IBM Tivoli Access Manager for Operating Systems �� 5.1� � ��� Tivoli

Information Center ���� ����.

v IBM Tivoli Access Manager for Operating Systems �� ���(SA30-1841-01)

v IBM Tivoli Access Manager for Operating Systems �� ���(SA30-1840-01)

v IBM Tivoli Access Manager for Operating Systems �� �� ���

(SA30-1842-01)

v IBM Tivoli Access Manager for Operating Systems ���� ��(GA30-1843-01)

v IBM Tivoli Access Manager for Operating Systems Read Me(GA30-1844-01)

IBM Tivoli Identity ManagerIBM Tivoli Identity Manager �� 4.5� ��� �� ��� ���� �� ���

��(�: �� ID � �)� ���� ���� �����(�, �����,

� �� �� ��� �� ���� �� �� �)� � ����. Tivoli Identity

Manager� Tivoli Access Manager Agent� � Tivoli Access Manager� ��

� � ����. Agent ��� �� �� ��� IBM ���� ������.

IBM Tivoli Identity Manager� �� �� ��� � �� �� � ����.

xiv IBM Tivoli Access Manager for e-business: ���� ��

Page 17: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

http://www.ibm.com/software/tivoli/products/identity-mgr/

��� �� ���

�� ����� ��� � Tivoli Softwarw Library� PDF �� HTML ���

� �� ����.

http://www.ibm.com/software/tivoli/library

�� ������ ����� Product manuals ��� ���. Tivoli Software

Information Center ����� �� �� � ���.

�� ��� ���� ��, �� ���, �� ���, �� ��� � �� �

��� �����.

�: PDF ��� ��� ��, Adobe Acrobat �� �� �(�� → ���

��)�� ���� ���� ��� ������.

�� ��� ��

�� ��� ��� �� ��� �� �� � ��� ��� �� ��� �

���� ��� ��� � ��� �����. � ����� �� ��� ���

������ ��� �� ��� � ����. �� ��� �� ���� ���

��� �� ������ �� ��� ��� � ����.

����� �� ��

Tivoli ��� ��� �� ��, IBM Tivoli Software Support� �� � ���

� � ����. � ����� Tivoli support ��� �� IBM Tivoli Software

Support� ������.

http://www.ibm.com/software/support/

��� �� ��, � ����� IBM Software Support Guide� ���

�� ��� ����� ��� ������.

http://techsupport.services.ibm.com/guides/handbook.html

� ��� �� � ���� �� IBM Software Support� ���� � � �

� �� ��� �����.

v �� � ���

v ��� �� ��� ���� � � �� ��

v ��� ��� �� �� � ��

�� xv

Page 18: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� �� ��� ��

� ���� �� ��� ��, � ��� � � ��� � � ��� ����

�.

��� ��

� ���� � � �� �� ��� �����.

�� ��� �� ���� �� � ��� � � , ���, ����, �,

Java ��� � � ����� �� �����.

����

��, �� ��, ���� ��� ��� ����� �����.

������

��� �� ���� ���, ��, ��, � , �� ��, ��� ��

�, ��� �� ��� � �� �� � �� ������� ��

���.

����� �� �� � ��

� ���� ��� �� � �� �� ��� UNIX ��� �����. Windows®

� � ��� ��, �� ��� $variable� %variable%� ��, ��� ���

���(/)� ����(\)� ����. Windows ����� bash �� ��� ��,

UNIX ��� ������.

xvi IBM Tivoli Access Manager for e-business: ���� ��

Page 19: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 1 � � ���� �� ��

IBM Tivoli Access Manager for e-business(Tivoli Access Manager) �� 5.1� �

�� e-business ��� ��� �� � �� ��� ���� � IBM Tivoli

Access Manager � IBM SecureWay Policy Director� �� �� �� �����.

� ���� ��� � ��� � � ����.

�� �

Tivoli Access Manager� ACL(Access Control List)� �� ��� �� �

�� ���� �� ��� �� � ����.

��� ��

Tivoli Access Manager� � �� ��� Tivoli Access Manager ����

���� � �� �� �� �� �� ���� �� ���� ���� �

�� �����.

Policy Proxy Server

Tivoli Access Manager� � ��� ����� � ���� ���� Tivoli

Access Manager � � �� �� DMZ�� ��� � �� �� Policy

Proxy Server� �����. �����, ��� ��� ���� policy ��

� ��� � � �� ���� ��� �� ���� ���� � ���

�.

Microsoft® Active Directory� �� ��

Tivoli Access Manager� UNIX �� ���� Tivoli Access Manager �

��� Microsoft Active Directory� �� ������ ���� Tivoli

Access Manager ���� ��� � �� ��� �����. Policy Server�

Windows� ��� �� ��� ������.

IBM Tivoli Directory Server � Sun ONE Directory Server� �� �� ��

� �� ��

Tivoli Access Manager� IBM Directory Server � Sun ONE Server� �

��� �� �� ��� ��� � ����.

Windows ���� �� �� �� �� WebSEAL ��

Tivoli Access Manager� WebSEAL ���� �� Windows ����

� �� �(SPNEGO) ��� �����. �� Windows � UNIX �� �

���� � �� �����.

Tivoli Access Manager� Tivoli Identity Manager �� �� ���

Tivoli Access Manager� ��� ���� � ���� �����. �

� ������ Tivoli Identity Manager � Tivoli Access Manager� �

© Copyright IBM Corp. 1999, 2003 1

Page 20: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� � �� ����� � �� �� �� ��� ��� ���

� � ��� ���� � � ����.

�� � �� �� �� �� ���� ���

Tivoli Access Manager� �� � � �� ��� ���� �� �� ��

�� �����. � PDJLog ��� � � � �� �� �����

PDJLog.properties ��� �� ����� �����.

Lotus® Domino® Server ������ �� ��

Tivoli Access Manager� ������ �� Domino Server� �� ��

� �� �� ���� Domino ��� �����. Tivoli Access Manager

� �� � ��� ��� ��� ��� ��� ���� �� �� ���

�� �� Domino Server� ��� � ����. � ��, Tivoli Access

Manager� Tivoli Access Manager ��� ��� �� ���� ����

� ����.

Linux ��

Tivoli Access Manager� Red Hat � SuSE Linux�� Policy Server,

WebSEAL � Plug-in for Web Server� �����. ���� �� ��

� ��� IBM Tivoli Access Manager for e-business Web Security �

� ���� ��� ������.

��� �� ��� ���

� ���� �� � ���� � �� ���, � �� � ��� ��

�� ���� �� ��� ��� ��� ���� ����� ����

���. ����� ���� ��� � Policy Proxy Server� �� ��

� �����.

���� ��� � pdadmin � � � � ����.

v �� ��� ���� ��� � �� � pdadmin -d ��� ���

v �� ���� ��� � �� � padadmin -m ���

v � pdadmin -l(� ���) ���

v � pdadmin context �

v � pdadmin domain �

v � pdadmin authzrule(�� �) �

v � pdadmin config � : config modify � config show

v � pdadmin object � : object access � object exists

v � ��(ACL ��): AuthzRule ��(R) � POP ��(B)

2 IBM Tivoli Access Manager for e-business: ���� ��

Page 21: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

CD ��

IBM Tivoli Access Manager(Tivoli Access Manager)� � CD� �����.

Base CD:

v IBM Tivoli Access Manager Base for AIX

v IBM Tivoli Access Manager Base for Solaris

v IBM Tivoli Access Manager Base for HP-UX

v IBM Tivoli Access Manager Base for Linux on xSeries

v IBM Tivoli Access Manager Base for Linux on zSeries

v IBM Tivoli Access Manager Base for Linux on pSeries and iSeries

v IBM Tivoli Access Manager Base for Windows NT, Windows XP, Windows 2000

and Windows 2003

Web Administraion CD:

v IBM Tivoli Access Manager Web Administration Interfaces for AIX

v IBM Tivoli Access Manager Web Administration Interfaces for Solaris

v IBM Tivoli Access Manager Web Administration Interfaces for HP-UX

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on xSeries

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on zSeries

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on pSeries

and iSeries

v IBM Tivoli Access Manager Web Administration Interfaces for Windows 2000

v IBM Tivoli Access Manager Web Administration Interfaces for Windows 2003

Web Security CD:

v IBM Tivoli Access Manager Web Security for AIX

v IBM Tivoli Access Manager Web Security for Solaris

v IBM Tivoli Access Manager Web Security for HP-UX

v IBM Tivoli Access Manager Web Security for Linux on xSeries

v IBM Tivoli Access Manager Web Security for Linux on zSeries

v IBM Tivoli Access Manager Web Security for Windows 2000 and Windows 2003

Directory Server CD:

v IBM Tivoli Access Manager Directory Server for AIX

v IBM Tivoli Access Manager Directory Server 1 of 2 for Solaris

v IBM Tivoli Access Manager Directory Server 2 of 2 for Solaris

� 1 � � ���� �� �� 3

Page 22: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

v IBM Tivoli Access Manager Directory Server for HP-UX

v IBM Tivoli Access Manager Directory Server for Linux on xSeries

v IBM Tivoli Access Manager Directory Server for Linux on zSeries

v IBM Tivoli Access Manager Directory Server for Linux on pSeries and iSeries

v IBM Tivoli Access Manager Directory Server for Windows 2000 and Windows

2003

WebSphere Fixpack CD:

v IBM Tivoli Access Manager WebSphere Fix Pack for AIX

v IBM Tivoli Access Manager WebSphere Fix Pack for Solaris

v IBM Tivoli Access Manager WebSphere Fix Pack for HP-UX

v IBM Tivoli Access Manager WebSphere Fix Pack for Linux on xSeries

v IBM Tivoli Access Manager WebSphere Fix Pack for Windows 2000

Attribute Retrieve Service CD:

v IBM Tivoli Access Manager Attribute Retrieval Service for AIX

v IBM Tivoli Access Manager Attribute Retrieval Service for Solaris

v IBM Tivoli Access Manager Attribute Retrieval Service for HP-UX

v IBM Tivoli Access Manager Attribute Retrieval Service for Linux on xSeries

v IBM Tivoli Access Manager Attribute Retrieval Service for Linux on zSeries

v IBM Tivoli Access Manager Attribute Retrieval Service for Windows 2000

v IBM Tivoli Access Manager Attribute Retrieval Service for Windows 2003

Language Support CD:

v IBM Tivoli Access Manager Language Support for AIX

v IBM Tivoli Access Manager Language Support for Solaris

v IBM Tivoli Access Manager Language Support for HP-UX

v IBM Tivoli Access Manager Language Support for Linux on xSeries

v IBM Tivoli Access Manager Language Support for Linux on zSeries

v IBM Tivoli Access Manager Language Support for Linux on pSeries and iSeries

v IBM Tivoli Access Manager Language Support for Windows NT, Windows XP,

Windows 2000, and Windows 2003

IBM Tivoli Access Manager� ����� ���� ���

Tivoli ��� �� �� ������ � ���� ����� � ����.

http://www.tivoli.com/support/downloads/

4 IBM Tivoli Access Manager for e-business: ���� ��

Page 23: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

″Software download(for registered users)″ ��� ��� � , ″IBM Tivoli Access

Manager″� ������. ���� ��� �� � � �� ������.

� 1 � � ���� �� �� 5

Page 24: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

6 IBM Tivoli Access Manager for e-business: ���� ��

Page 25: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 2 � ��� ����

� ���� ��� �� �� �� ��� � �����.

� �� ���� ����.

v ����� ������

v 12 ���� ���� �� � ��� ����

v 22 ���� ������

���� �����

� � Tivoli Access Manager� ���� �� �����, ���� � �� �

�� �� �� �� ��������.

IBM Tivoli Directory Server

Tivoli Access Manager��� IBM Tivoli Directory Server, �� 4.1, 5.1 � 5.2

� ��� �����.

�: IBM Tivoli Directory Server, �� 5.2� Tivoli Access Manager, �� 5.1�

�����. � ���� ��� IBM Directory Server ��� ��� � ���

IBM Tivoli Access Manager, �� 5.1� LDAP registry IBM Directory Client

�� 5.2� �����, �� 4.1 �� 5.1� ��� �� ��� ���� IBM

Tivoli Directory Server� ��� ���.

���� ���� � � ����.

v AIX ��:

– AIX 5.1

– AIX 5.2

�: AIX 5.1�� AIX ���� �� 4 ��� ��� ���. AIX 5.2�� AIX

���� �� 1 ��� ��� ���.

v HP-UX ��:

– HP-UX 11

– � ��� ��� HP-UX 11i:

- 2001 12� GOLDBASE11i ��

- 2001 12� GOLDAPPS11i ��

- �� PHSS_26560

© Copyright IBM Corp. 1999, 2003 7

Page 26: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

v xSeries ��� Linux:

– ��� 2� UnitedLinux 1.0

– SuSE Linux Enterprise Server 8

– Red Hat Enterprise Linux 3.0

v zSeries ��� Linux:

– SuSE Linux Enterprise Server 8

– Red Hat Enterprise Server 3.0

v pSeries � iSeries ��� Linux

– Red Hat Enterprise Server 3.0

– SuSE Linux Enterprise Server 8

v Solaris ��:

– Solaris Operating Environment Software, �� 8 � 9

– Trusted Solaris, �� 8

v Windows ��:

– Windows 2000

– Windows Server 2003, Standard �� Enterprise

– ��� 6 ��� Windows NT 4.0; �� ���� Windows NT �� �

��(NTFS)� ����.

��:

v Tivoli Access Manager� ��� IBM Directory Server� �� �� ����

��� ���������. ������ �� �� ��� IBM Tivoli Access

Manager Upgrade Guide� ������.

v IBM� � �� ����� LDAP(Lightweight Directory Access Protocol)� �

� ��� ��, IBM Tivoli Directory Server� ���� �� �� �� �

��.

IBM Tivoli Directory Server � �� �

IBM Tivoli Directory Server� IBM Tivoli Directory Server �� �, �� 5.2

� ��� �����. IBM Tivoli Directory Server ����� �� ��� �� �

�� �� � ��� �� ����� �� �� ��� � ����. �� ��

��� ��� � �� LDAP ��� � � ����.

v IBM Tivoli Directory Server, �� 5.2

v IBM Directory Server, �� 5.1

v IBM Directory Server, �� 4.1

v OS/400 V5R3

8 IBM Tivoli Access Manager for e-business: ���� ��

Page 27: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

v z/OS™ R4

�: z/OS R4� ��, �� ���� � � �� ��� �����.

– �� TDBM ���

– �� SDBM ���

– ��� TDBM � SDBM ���

� ����� �� �� �����.

v AIX ��:

– AIX 4.3.3

– AIX 5.1

– AIX 5.2

v HP-UX ��:

– HP-UX 11

– HP-UX 11i

v xSeries ��� Linux:

– UnitedLinux 1.0

– SuSE Linux Enterprise Server 7 � 8

– Red Hat Advanced Server 2.1

v zSeries ��� Linux:

– SuSE Linux Enterprise Server 8.0

v pSeries � iSeries ��� Linux :

– UnitedLinux 1.0

– SuSE Linux Enterprise Server 8.0

v Solaris ��:

– Solaris Operating Environment Software, �� 7, 8 � 9

– Trusted Solaris, �� 8

v Windows ��:

– Windows 2000

– Windows XP

– Windows Server 2003, Standard �� Enterprise

– ��� 6 ��� Windows NT 4.0

�� �� ���� � � ����.

v � ����� �� � ��� ����.

– WebSphere Application Server� � �� �� -- Express V5.0 ��

� 2 � ��� ��� 9

Page 28: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

– IBM WebSphere Application Server, �� 5.0 ��. IBM WebSphere

Application Server �� 5.0.2� Tivoli Access Manager �� 5.1� ����

�.

v �� �� ��� ���� � ����� ����.(�� �� ��� �

��� �� ���� �� �� � �� ����.)

– AIX ��: Mozilla 1.3 �� 1.4

– HP-UX ��: Mozilla 1.3 �� 1.4

– xSeries ��� Linux: Mozilla 1.3 �� 1.4

– iSeries, pSeries � zSeries ��� Linux: ����� ���� ����. �

�� Linux ����� �� �� ����� �� ���� ��� �

��.

– Solaris ��: Mozilla 1.3 �� 1.4

– Windows ��: Internet Explorer, �� 6.0

OS/390� IBM Security Server

Tivoli Access Manager� OS/390®� IBM Security Server, �� 2, ��� 10�

�����. �� ��� ��� � � �� OS/390 ��� ����� ���

� ������.

http://www.s390.ibm.com/os390/bkserv/

IBM z/OS Security Server LDAP Server

Tivoli Access Manager� IBM z/OS Security Server LDAP Server, �� 1, ��

� 2 ��� ��� �����. �� ��� � � �� z/OS ��� ������

������.

http://www.ibm.com/servers/eserver/zseries/zos/bkserv/

��� CD-ROM(z/OS: ��, SK3T-4269)�� ����� ��� ��� �� �

���.

Lotus Domino

Windows ����� Tivoli Access Manager� �� ������ Lotus® Domino,

�� 5.0.10 � 6.0� ��� �����. Domino Server� Tivoli Access Manager,

�� 5.1�� ���� �� ����� � � ����.

��: Lotus Domino� ������ ��� �� � ��� ������.

v IBM Tivoli Directory Client� ��� ����.

10 IBM Tivoli Access Manager for e-business: ���� ��

Page 29: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

v Access Manager Runtime ���� ���� �� Lotus Notes® ������

��� ���. Tivoli Access Manager� Lotus Notes ����� �� 5.0.10

� �� 6.0 ��� �����.

Microsoft Active Directory

Tivoli Access Manager� �� ������ Windows 2000 � Windows 2003�

Active Directory� ��� �����.

Tivoli Access Manager� �� ����� Active Directory ��� Windows 2000

Advanced Server ������ �� �����. �� 5.1�� ��� ��� Active

Directory ��� �� Tivoli Access Manager ���� ���� �� Windows

� UNIX ����� Tivoli Access Manager� �� � ��� ����(Windows

NT� ��).

UNIX ������ IBM Tivoli Directory Client� ��� Active Directory� �

����. � LDAP ������ Policy Server ���� � ��� �� ��

�� �� ���� �����.

Tivoli Access Manager Policy Server� Windows 2000 � 2003 ������ �

����.

Netscape iPlanet � Sun ONE Directory Server

Tivoli Access Manager� �� ������ Netscape iPlanet Directory Server,

�� 5.1 � Sun ONE Directory Server, �� 5.2� ��� �����.

�� ��� iPlanet �� Sun ONE Directory Server� ��� �� ��� ���

���.

��:

v Tivoli Access Manager� ��� ��� iPlanet �� Sun ONE Directory Server

� �� ��� ���� ��� ���������. ����� ����� �

�� � ��� �� Sun ��� ������.

http://docs.sun.com/db/prod/s1dirsrv

v iPlanet � Sun ONE Directory Server�� �� SSL ��� ����. ���

��� ��� ���� Access Manager Runtime ���� ���� ��

GSKit� ��� ���.

Novell eDirectory

Tivoli Access Manager� �� ������ Novell eDirectory 8.6.2 � 8.7� �

�� �����.

� 2 � ��� ��� 11

Page 30: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� ��� Novell eDirectory ��� ��� �� ��� ������. Novell

eDirectory �� ��� � ����� �� �����.

http://www.novell.com/documentation/a-z.html

� ��� �� �� ��� � ����� �� �����.

http://support.novell.com/filefinder/5069/index.html

��:

v Tivoli Access Manager� ��� Novell eDirectory ��� �� �� ���

���� ��� ���������.

v Novell eDirectory ���� �� SSL ��� ����. ��� ��� ��� �

��� Access Manager Runtime ���� ���� �� GSKit� ���

���.

��� �� � ��� ����

Tivoli Access Manager ��� � ������ ��� ��� ��� �� �

����. � ��� ��� �� ���� ��� ��� ���� ��� ���.

� Tivoli Access Manager ��� �� ���� �� ���� �� ��

�� ��� ��� ����. � Tivoli Access Manager ������ ��� �

��� �� ��� ��� ���� ������.

� ��� � � ��� �����.

v 13 ���� �Tivoli Access Manager �� ����

v 14 ���� �Tivoli Access Manager �� ����

�: ��� ����� Tivoli Access Manager ����� �� ��� �� �

��� ���� �����. ����� ��� ��, � ���(�: � �

� �� �� ��)� ��� ���.

12 IBM Tivoli Access Manager for e-business: ���� ��

Page 31: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Tivoli Access Manager �� ����

� 1. �� ��� -- ��� �� � ��� ���

���� �� ���

��(MB)

�� ���

��(MB)

ACL ���

����

��� ��

(MB)

�� ���

��� ��

��(MB)

�� ��

(MB)

�� ��

(MB)

�� ���

� ��

Access Manager

Application

Development Kit

3 5 -- -- -- -- --

Access Manager

Authorization Server2 4 15 2 5 30 40 --

Access Manager Java

Runtime Environment8 10 -- -- -- -- --

Access Manager

Policy Proxy Server1 2 -- 40 --

Access Manager

Policy Server2 4 5 1, 2 10 1 30 40 5 2

Access Manager

Runtime36 40 -- -- -- -- --

Access Manager Web

Portal Manager1 2 -- -- 35 3 70 4 --

Global Security Kit 18 20 -- -- -- -- --

IBM Tivoli Directory

Client46 50 -- -- 6 6

IBM Tivoli Directory

Server(�� �� ��

��� ��)

145 7 245 7 -- 10 256 5 512 - 1GB 5 --

I B M W e b S p h e r e

Application Server, �

� 5.0.2

552 552 -- -- 256 512 --

�:1 � ��� �� ����� ����. � � ���� ��, � ��� �� ��� ��� �����.

2 10,000�� ����� 10�� ���� ��� �� ���� ��, ����� 10%� 30�� ACL� ���� �� ��

���� �, ACL ��� ��� �� ��� �����. ��� Policy Server� ���� � �� ��� �� ��

� � ��� �� ��� 3����.

3 WPM� �� �� ��� ��� � ����� �� ��� �����.

4 WPM� �� ����� �� ��� ����� � ��.

5 256MB(��) � 512MB - 1GB(��) ���� Tivoli Access Manager ��� ��� ��� ��� �� ����.

��� ��� ��� � �� 512(��) � 1GB - 2GB(��) ���� �����.

6 IBM Tivoli Directory Client� �� ��� ��� �� ���� ��� �� ���� �����.

7 IBM Tivoli Directory Server ��� � ��� ��� �����. Tivoli Access Manager ��� 10KB� ��

���.

� 2 � ��� ��� 13

Page 32: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Tivoli Access Manager � �� ����

� 2. �� ��� -- ��� �� � ��� ���

���� �� ���

��(MB)

�� ���

��(MB)

ACL ���

���� �

�� ��

(MB)

�� ���

��� ��

��(MB)

�� ��

(MB)

�� ��

(MB)

�� ����

��

Access Manager

WebSEAL20 25 15 1 200 2 80 250 3 --

Access Manager

WebSEAL

Application

Development Kit

3 5 -- -- -- -- --

Access Manager for

WebLogic Server2 4 -- 5 64 128 --

Access Manager for

WebSphere2 4 -- 5 64 128 --

Access Manager

Plug-in for IBM

HTTP Server

15 25 15 1 10 60 120 --

Access Manager

Plug-in for Apache

Web Server

15 25 15 1 10 60 120 --

Access Manager

Plug-in for Sun

ONE Web Server

15 25 15 1 10 70 140 --

Access Manager

Plug-in for Internet

Information Services

15 25 15 1 10 165 225 --

Access Manager

Attribute Retrieval

Service

6 10 -- -- 10 14 --

Access Manager

Plug-in for Edge

Server

15 25 15 1 10 15 30 --

�:1 10,000�� ����� 10�� ���� ��� �� ���� ��, ����� 10%� 30�� ACL� ���� �� ��

���� �, ACL ��� ��� �� ��� �����. ��� Policy Server� ���� � �� ��� �� ��

� � ��� �� ��� 3����.

2 ��� www( �� ���) ��� �� ��� �����.

3 �� �� �� ��� �� ���� �����. �� ���� ��� �� � �� �����.

14 IBM Tivoli Access Manager for e-business: ���� ��

Page 33: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

���� ���(�� �� ��)� 3� ���� � ��� �� �� �� ��� ��� ���� ����.

�: SuSE Linux� ��� UnitedLinux 1.0� ���� �� � �� ��� �� �

�����. �� ��� SCO Group, Turbolinux � Conectiva���. SLES(SuSe

Linux Enterprise Server)� ���� �� ���� UnitedLinux 1.0 ��� �

��� �� � ��� ��� ��� �����. �� ��� � �

UnitedLinux ���� ������.

http://www.unitedlinux.com

� 3. ���� � �� ���� �� ��

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

AIX 4.3.3

v Development(ADK)

v Java Runtime Environment

v Runtime

�� �� � � ��� ����.

v bos.rte.libpthreads(�� 4.3.3.51 �

�)

v xlC.rte(6.0.0.0 C Set ++ Runtime)

v xlC.aix43.rte(6.0.0.3 C Set ++

Runtime)

AIX 5.1

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for Edge Server, �� 5.1

v Plug-in for IBM HTTP Server, ��

1.3.26

v Plug-in for Sun ONE Web Server, �

� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebLogic

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

���� �� 4 �� � � ��� �

���.

v xlC.rte(6.0.0.0 C Set ++ Runtime)

v xlC.aix50.rte(6.0.0.3 �� C Set ++

Runtime)

� 2 � ��� ��� 15

Page 34: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

AIX 5.2

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for Edge Server, �� 5.1

v Plug-in for IBM HTTP Server, ��

1.3.26

v Plug-in for Sun ONE Web Server, �

� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

���� �� 1 ��

AIX 5200-01 ���� ��� � � �

�� ����.

v xlC.rte(6.0.0.0 C Set ++ Runtime)

v xlC.aix50.rte(6.0.0.3 C Set ++

Runtime)

v 5.2.0.12� bos.rte.libc

HP-UX 11.0

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for

WebLogic(BEA WebLogic Server, �

� 7.0 ��)

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

v XSWGR-1100

v PHKL_25475

v PHSS_26945 ��

v PHSS_25091

v �� �� ��:

– ���: PHSS_26972

– ���: PHSS_26974

– ���: PHSS_26976

– ���: PHSS_24937

16 IBM Tivoli Access Manager for e-business: ���� ��

Page 35: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

HP-UX 11i

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for

WebLogic(BEA WebLogic Server, �

� 7.0 ��)

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

v PHCO_24400

v PHCO_24402

v PHSS_25092

v PHSS_26946

v �� �� ��:

– ���: PHSS_26971

– ���: PHSS_26973

– ���: PHSS_24975

– ���: PHSS_26977

Red Hat Enterprise Linux 2.1v Plug-in for Edge Server, �� 5.1 GSKit iKeyman ���(gsk7ikm)� ��

� ���� � ��� ����.

pdksh-5.2.14-13.i386.rpm

Red Hat Enterprise Linux 3.0

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Policy Server

v Policy Proxy Server

v Runtime

v WebSEAL Server

v WebSEAL Development(ADK)

� 2 � ��� ��� 17

Page 36: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

IA32� SuSE SLES8

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for IBM HTTP Server, ��

1.3.26

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

libstdc++-3.2.2-5

v S/390 � zSeries� SuSE SLES8(31�

� ���)

v zSeries� SuSE SLES8(64�� ���)

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v mod SSL� plug-in for Apache Web

Server, �� 1.3.26-36(31�� ��)

v Plug-in for IBM HTTP Server, ��

1.3.26

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

���� �� ��:

v 31��: k_deflt-2.4.19-32

v 64�� ��: k_deflt-2.4.19-34

��� 2 ��:

v 31�� ��:

– k_deflt-2.4.19-79

v 64�� ��:

– k_deflt-2.4.19-80

pSeries � iSeries� SuSE SLES8

v Development(ADK)

v Java Runtime Environment

v Runtime

v Web Portal Manager

���� �� ��:

v kernel-iseries64-2.4.19-104

v kernel-ppc64-2.4.19-108

��� 1 ��:

v kernel-iseries64-2.4.19-194

v kernel-ppc64-2.4.19-186

18 IBM Tivoli Access Manager for e-business: ���� ��

Page 37: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

Solaris � �� 7

v Development(ADK)

v Java Runtime Environment

v Runtime

32�� ���:

v 106327-18

v 106541-24

v 106950-22

v 106980-22

v 107544-03

64�� ���:

v 106300-19

v 106327-18

v 106541-24

v 107544-03

v 106950-22

v 106980-22

Solaris � �� 8

v Attribute Retrieval Service

v Authorization Server

v Development

v Java Runtime Environment

v mod SSL� Plug-in for Apache Web

Server, �� 1.3.27

v Plug-in for Edge Server, �� 5.1

v Plug-in for IBM HTTP Server, ��

1.3.26

v Plug-in for Sun ONE Web Server, �

� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebLogic

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

32�� ���:

v 109147-15

v 108434-05

v 108528-24

v 108827-40

v 111327-02

v SUNWuiu8

v SUNWjiu8

64�� ���:

v 109147-15

v 108434-05

v 108435-06

v 108528-24

v 108827-40

v 111327-02

v SUNWuiu8

v SUNWjiu8

� 2 � ��� ��� 19

Page 38: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

Solaris � �� 9

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v mod SSL� Plug-in for Apache Web

Server, �� 1.3.27

v Plug-in for Edge Server, �� 5.1

v Plug-in for IBM HTTP Server, ��

1.3.26

v Plug-in for Sun ONE Web Server, �

� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebLogic

v Tivoli Access Manager for

WebSphere(�� 5.0.2 ��)

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

11711-06

Windows NT 4.0

v Development(ADK)

v Java Runtime Environment

v Runtime

��� 6a

Windows XP � 2000 Pro

v Development(ADK)

v Java Runtime Environment

v Runtime

20 IBM Tivoli Access Manager for e-business: ���� ��

Page 39: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

Windows 2000 Server � Advanced

Server

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for Edge Server, �� 5.1

v Plug-in for Internet Information

Services, �� 5.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebLogic

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

��� 3

Windows 2003 Standard Server �

Enterprise Server

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for Internet Information

Services, �� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Windows 2003 Enterprise Server�

Tivoli Access Manager for

WebSphere(�� 5.0.2 ��)

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

� 2 � ��� ��� 21

Page 40: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

����

� Tivoli Access Manager ���� Policy Server �� Authorization Server

�� 5.1� ��� � ����.

v Access Manager Runtime, �� 3.8, 3.9, 4.1 � 5.1

v Access Manager Java Runtime Environment, �� 3.9, 4.1 � 5.1

�:

1. AZN ��� ��� � �� ���� ��� ��� ��� �� �����.

2. �� ���� �� ���� ��� ����� ���.

3. Active Directory �� Lotus Domino� �� ������ ��� ��, ��

Tivoli Access Manager ���� �� 5.1 ����� ���.

Tivoli Access Manager, �� 3.9 � 4.1 ������ � Tivoli Access Manager,

�� 5.1�� ���� ��� ����� � � ����.

v Access Manager Runtime, �� 5.1� �� ���� Tivoli Access Manager, �

� 4.1 � 3.9 ADK� � ��� ������ �����(Solaris� ��).

v Solaris� Access Manager Runtime, �� 5.1� Tivoli Access Manager, �� 4.1

ADK� � ��� ������ �����.

22 IBM Tivoli Access Manager for e-business: ���� ��

Page 41: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

���� ������ �� ��

� 4� Tivoli Access Manager WebSEAL, �� 5.1�� ���� �� ���

�� ���� ����� ��� ���� ����.

� 4. ���� ���� �� ��

�� ���� ���� ����� ��

AIX 5.1 v nCipher nForce 300 RSA BSAFE, �� 5.32

v nCipher nForce 300 PKCS#11, �� 5.32

v IBM 4758-023 PKCS#11, �� 2.41

v Eracom Orange PKCS#11, �� 2.11

v IBM 4960 PKCS#11, �� 5.1.0.25

AIX 5.2 v IBM 4758-023 PKCS#11, �� 2.41

v Eracom Orange PKCS#11, �� 2.11

v IBM 4960 PKCS#11, �� 5.1.0.25

HP-UX 11 Rainbow Crypto Swift RSA BSAFE, �� 3.2.0

HP-UX 11i ���� �

Red Hat Enterprise Linux 3.0 v Eracom Orange PKCS#1, �� 2.11

IA32� SuSE SLES8 v Eracom Orange PKCS#11, �� 2.11

zSeries� SuSE SLES8(64�� ���

31�� compat. �� � 31�� ��)

� S/390(31�� ��)

v PCICA - zSeries �� �� 0862

v PCICC - zSeries �� �� 0861, S/390 �� �� 0860

Solaris 8 v Rainbow Crypto Swift RSA BSAFE, �� 3.2.0

v nCipher nForce 300 RSA BSAFE, �� 8.0

v nCipher nForce 300 PKCS#11, �� 8.0

v Eracom Orange PKCS#11, �� 2.11

Solaris 9 v nCipher nForce 300 RSA BSAFE

v nCipher nForce 300 PKCS#11, �� 2.10

Windows 2000 Server � Advanced

Serverv Rainbow Crypto Swift RSA BSAFE, �� 3.2.0

v nCipher nForce 300 RSA BSAFE, �� 8.0

v nCipher nForce 300 PKCS#11, �� 8.0

v IBM 4758-023 PKCS#11, �� 2.41

v Eracom Orange PKCS#11, �� 2.11

Windows 2003 Standard Server �

Enterprise Server

���� �

��� �� ����� �� WebSEAL� � �� ���� ��� ����� �

�� ����� ������. BSAFE ��� ��, WebSEAL� �� � ��

� ��� ����. GSKit� ��� ��� �����. ���� GSKit(�:

WebSEAL)� ���� �� Tivoli Access Manager ���� ����� �

� 2 � ��� ��� 23

Page 42: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

����. PKCS11 ��� ��, WebSEAL �� ��� PKCS11 ���� ���

WebSEAL� PKCS11� ����� � ���.

24 IBM Tivoli Access Manager for e-business: ���� ��

Page 43: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 3 � ��� ��� � ���� ��

� � �� � ����� IBM Tivoli Access Manager(Tivoli Access Manager)

�� �� �� �����. �� �� ��� �� �� ��, �� ���� �

���. �� ���� �� � ��� ���� ����. � �� � Tivoli �

�� IBM Customer Support� ������.

�: � ��� ��� � IBM Tivoli Access Manager for e-business ��� �

� �� 53 ���� � 4 � ��� �� ������ ��� ����.

�� � ����

���� �� � �� �� ����� ������.

Active Directory� �� Windows 2003 ���� �� ���� ���

(44369)

�� ������ Active Directory� ���� Windows 2003 ����� ��

���� �����.

���� ��: �� �� �� ���� ������. �� �� ���� ����

�� �� ���� ���� �� IBM Tivoli Directory Client� ��� ��

�. ������ ���� CD ����:\Windows\Directory� ��� �

setup.exe� �����. �� ����� �����. ��� ��� ����� �

� Client SDK 5.2� ������. ��� �� � �� ���� ������.

�� ���� LDAP ��� Plug-in for Web Server� �� SSL ���

���� ��(44336)

LDAP ��� SSL ��� ���� �� ���� ��� Plug-in for Web Server

� ���� ����. �� �� ��� ������. Plug-in for Web Server ��

���� LDAP ���� SSL �� �� ���� ����.

�� ���� �� ��� Active Directory ����� ���(44046)

�� ��� Active Directory ����� �� ���� �� � �� ID

sec_master� ��� ��� ��� �� � � �� �� ID ��� �

�� ��� �����.

���� ��: Access Manager �� ID� ��� ��� ��� ������.

© Copyright IBM Corp. 1999, 2003 25

Page 44: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Tivoli Access Manager� ����� AIX®� ��� JRE �� 1.3.1.5��� ���� ��� �(41082)

AIX� JRE 1.3.1.5(Tivoli Access Manager CD� ��) ��� ���� ���

���. �� ��� IBM Tivoli Access Manager for e-business Web Security �

� ���� ������.

�� ���� ��� � JDK 1.3.1� Red Hat Enterprise Linux 3��

���(40973, 43956)

Red Hat Enterprise Linux 3.0�� ���� NPTL(New Threading Library)� Tivoli

Access Manager 5.1� ��� JDK 1.3.1�� ���� ����. �� � ���

�����.

���� ��: �� ����� ��� �� LD_ASSUME_KERNEL �� ��� JDK

1.3.1� �� ��� �� ������. �� �, � � ����.

export LD_ASSUME_KERNEL=2.4.0

��

export LD_ASSUME_KERNEL=2.2.5

��, IBM ���(http://www.ibm.com/developerworks/java/jdk/index.html)�� �

� ��� �� JRE ��� � ��� ��� �� �� ����.

Tivoli Access Manager Java Runtime Environment javadocs� �

���� Access Manager Runtime ����� ���� ��� �

(43895)

Tivoli Access Manager Application Development Kit� ��� Javadoc ��� �

��� Tivoli Access Manager Runtime ���� ���� ��� ���. ��

Access Manager Application Development Kit�� �� �� ������ �

� �� ��� �����.

Web Portal Manager� ����� IBM Java Runtime Environment1.3.1� ���(44178)

Web Portal Manager� IBM Java Runtime Environment 1.3.1� ��� ���

� ����. �� JRE(�: Sun Java Runtime Environment)� ��� Web Portal

Manager ��� ��� � ����.

WebSphere Application Server ���� �� ��� ���(44432)

WebSphere Application Server� ���� � ���� ��� ��� ��� �

� ���� �� ����. ��, ���� ��� �� �� �� ��� ��� �

� ����. �� ��� � � �� ���� �� ��� ������.

26 IBM Tivoli Access Manager for e-business: ���� ��

Page 45: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� �� �� ���� ��� Web Portal Manager� ��

� �, �� �� 80�� HTTP Server� � ��

���� WebSphere Application Server� �� �

�� ��� ��� ��, �� ���� � HTTP

Server� ��� 81� �����. AIX�� �� �

��� WebSphere Administrative Console� ���

9091� �����. ��� ����� AIX� ��

9090�� � �� ���(wsmserver)� �� ��

���.

�� �� WebSphere� �� ����� � ���� �� �

� ���� � �� �� HTTP Server�� ��

80� ���� �� ���� �� 9090� ����

�. �� ���� � ��� �� �� �� ��

� ����� ���� ��� ������.

�� WebSEAL ��� ������� libcdmf.* �� ��� � ��

(44079)

�� WebSEAL �� �� WebSEAL� �� ��, �� libcdmf.* ��� ���

� ���� �� ��� �� ���. �� ��� � ��� �����. �

WebSEAL ��� ��� � �� ��� �� ��� �����.

�� � ����

�� �� � �� �� ����� ��� � ����.

�� ���� zSeries®� Red Hat Enterprise Linux 3.0�� ���

(42163)

zSeries� Linux� Red Hat Enterprise Linux 3.0 Beta 2�� install_amrte ��

���� ��� Access Manager Runtime ��� ��� ��, � ��� �

�� � ����.

[root@metlnx03 am51-030915]# ./install_amrteInstallShield Wizard

Initializing InstallShield Wizard...

Searching for Java(tm) Virtual Machine..............................................................................No matching JVM was found.

���� ��: � � �� �� ����� �����.

java -cp install_xxx_setup.jar run

� 3 � �� �� � ��� � 27

Page 46: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� Java ��� Java 1.4.1���.

Windows 2000� ��� � Java Runtime Environment� �� � �

�(43948)

Windows 2000�� �� ��� Java Runtime Environment� ��� �� ��

�� ��� � � � �����.

java -cp install_xxx_setup.jar run

�� ��, �� ���� install_amacld.exe� � � � �����.

java -cp install_amacld_setup.jar run

.jar ��� �� ���� ��� ���� ����.

��� �� �� � � �� �� ��� �����.

�� ��� �� �� �� � Policy Server �� ��(43906)

LDAP Server� ���� �� ���� ��� Windows ���� Policy Server�

��� ��, ���� ��� �� Policy Server ��� �����. �� LDAP

Server� ��� �� ���� �� �����.

���� ��: LDAP Server ���� ��� � Policy Server� ������.

2���� ��� �� ���� �� �� �� ���� ���� ��

(37601, 39896, 43907)

2�� � �� ����� --options-record �� --options-template� �

�� �� ���� � ��� ��� ��, ��� �� ��� ��� ����

�����. � �� � �� ��� �� ����.

�� ���� ���� Windows� Web Portal Manager� ��� �

��� ���(44045)

Windows� Web Portal Manager� ��� � ��� ��� ��� � ���

�� �����.

�� �� ibmjcaprovider.jar � ��(44323)

Tivoli Access Manager Java Runtime Environment ���� ��� �

$JAVA_HOME/lib/ext/ibmjcaprovider.jar ��� �� � �� ����� �

� ����� ���� �����. � ��, ����� � ��� ��� �

� ���. �� �� �� �� ext ���� ������ ��� ��

�. JRE� �� ��� ���� ���� � � ��� ��(� �� ���

����)� �� ��� ���. JRE� �� ���� � ��� � ���

� ��� �����. ���, � ��� �� � ���� ����� ��� � JRE

28 IBM Tivoli Access Manager for e-business: ���� ��

Page 47: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� �� � �� ��� ��� �� ���� � ��� � � ��� ��

�� ��� ���� �� ��� � ����. ��� ibmjcaprovider.jar ���

�� Tivoli Access Manager Java Runtime Environment� ���� ����

�� ��� ���� ���� ���.

Microsoft Active Directory ��

Microsoft Active Directory� ��� � ��� � �� �� � ����� �

� ����.

Active Directory �� �� �� �� ��

�� ������ Microsoft Active Directory� ��� � �� �, �� �

�� �� �(DN)� �� �� ���� ����. �� ��, Active

Directory� DN�� ����(\)� ��� � ����. �� ��� Active Directory

��� ������.

Active Directory� ��� � ″� � � � ″ ��

�� ������ Active Directory� ��� � Microsoft Windows 2000 ��

Windows 2003 �� ��� ������ �� � ��� �� ���� ����

��� ���. � ���� ��� � ��, ���� ��� � �� ����

�����. �� ��� � � ������.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q260371

Policy Server �� � Windows 2003 Active Directory� �����

��� �� �� �� ���� ���� ��� � ��(43908)

Active Directory� � �� Windows 2003�� Policy Server� ��� ��, �

�� ��� �� ��� ��� ���� ����� ��� � ����. ��

��, ���� Policy Server �� ��� � � ��� �� ���� �����.

HPDRG0100E The operation in the Active Directory registry for User:rspi_create_user : : HRESULT = 0x800708C5 (778: c:\am510\src\uraf\ad\urafuser.cpp)failed with return error 800708c5 RunADURAFToolConfig: uraf_create_domain() returnerror 0x16B48065

���� ��: Policy Server� �� �� � �� �� ���� ���� �

� ��� �� ������.

Windows 2000 ���� � ����� �� ����� ��� � �

��� ��(36389)

Windows 2000�� Active Directory� ��� � �� ����� �� �����

��� ��, ��� ���� �� ��� ���� ��� � ��� � ��� �

� ���.

� 3 � �� �� � ��� � 29

Page 48: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

1. ���� � ��� ACL� �����(��� ��). ACL� ��� 2���

������.

a. Active Directory ���� � → ���� → � ��� ��� � Active

Directory ��� � ��� ���.

b. Active Directory �� � �� ���� Tivoli Access Manager� ��

�� �� ���� ���.

c. ���� ��� ��� �� � � �� ��� ���.

d. � ��� ivacld-servers � remote-acl-users� ���� �� ��

� �����.

e. � ��� �����.

2. � � �� Tivoli PD ��� ����� �����.

a. Active Directory ���� � → ���� → � ��� ��� � Active

Directory ��� � ��� ���.

b. Active Directory �� � �� ���� Tivoli Access Manager� ��

�� �� ���� ���.

c. Tivoli PD ��� ����� �����.(� ����� �� �� ��� �

�� �� ���� ��� ���.)

d. ���� ��� ��� ����� ��� ��� �� � � ��

� ������.

e. �� ���� �� ��� � IBM Tivoli Access Manager for e-business

Web Security �� ����� Tivoli Access Manager �� ��� ���

�� Active Directory �� � ��� �� Tivoli Access Manager� �

�����.

iPlanet Directory Server �� Sun ONE Directory Server ��

iPlanet Directory Server �� Sun ONE Directory Server� ��� � ��� �

�� �� � ����� � � ����.

iPlanet ����� �� � ��(14785)

iPlanet Directory Server �� 5 ������ ��� ���� Tivoli Access

Manager� ��� �� ���� “� � �� ��” ��� ��� � ���

�. �� � ���� ���� ������ “�” ���� �� ��� ���

� �� ������ ���� �� �� � ����.

30 IBM Tivoli Access Manager for e-business: ���� ��

Page 49: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

iPlanet Directory Server� ��� � ��� ��� ��� ���

LDAP_ADMINLIMIT_EXCEEDED ��� ����, Tivoli Access Manager��� �

� ��� �����. � ��� iPlanet LDAP ��� � �� �� �

�� �� �� �������.

iPlanet Console��, Configuration �� ���� Data ��� �����. �� �

, Database Settings ��� ��� � LDBM ���� �� �� ������.

Look-through Limit ����, � �� �� ���� ��� � �� ��

�� ������. �� � �� � 5000���. ��� ���� � ��� -1

� ������.

���� Directory Manager� ��� ��, ����� � ��� ���� �

��� ��� � �����.

iPlanet �� �� �� � ��� ���

Tivoli Access Manager Plug-in for Web Server� ��� iPlanet �� ��(��

��� �: https-admserv)� ��� � pdwebpi.log ��� � � ��� ��

���� �����.

2002-03-16-07:33:31.901+00:00I----- 0x35F02127 pdwebpi ERRORpic Authorization Server pdwebpi_admin_svc.c 323 0x00000001The administration service could not read the configuration information forvirtual host /PDWebPI/https-admserv: 0x35f02002:The requested data is not currently available (pd / pic)

2002-03-16-07:33:31.902+00:00I----- 0x35F02129 pdwebpi WARNINGpic Authorization Server pdwebpi_admin_svc.c 330 0x00000001The administration service could not initialized for virtual host/PDWebPI/https-admserv. Administration service features will not beavailable for this virtual host

� �� ���� iPlanet �� ��� � �� ��� �� �� �� ���

�� ��� �����. ��� ��� Tivoli Access Manager� � �� ��� �

“�� ��”� ��� ��� �� � ����.

ONE Directory Server 5.2��� pdunconfig� ��� ��� � ��

(40621)

Sun ONE 5.2 ���� IBM Tivoli Access Manager for e-Business Server�� �

� ��� ��� �� �� � �� ��� Object does not exist ��� �

� �����.

���� ��: � ��� �����.

1. ��� �� �����.

2. Sun ONE 5.2 ��� ������.

3. secauthority=default ���� ��� � �� ������.

� 3 � �� �� � ��� � 31

Page 50: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Web Portal Manager ��

Tivoli Access Manager Web Portal Manager GUI� ��� � ��� � �� �

� � ����� � � ����.

AIX 5.1�� Web Portal Manager GUI ���

IBM Tivoli Access Manager �� �� ���� Web Portal Manager� �

����� ����� ���� ����.

v Netscape Navigator 4.78 � 6.2

v Internet Explorer 5.5 � 6.0

� ���� ��� AIX ��� �� � ���� �����. AIX 5.1 ����

Web Portal Manager� ���� ���� � ����� ��� � ����. ��,

��� (�� 4.79)� ���� Netscape ��� ��� � ����. � ����

������ ��� Web Portal Manager ��� ��� �� ���� ����

���� �� � ����.

���� ��: AIX 5.1 ���� Netscape 7.0.3� ������.

�� ��� �� ���� Policy Proxy Server� ���� ��(30100� 30128)

Proxy Server� ���� �� Tivoli Access Manager � IBM Directory Server

�� ��� ��� Proxy Server�� ����� ��� � ����. Proxy Server

� ��� �� ��� ����� ����� ��� ��� ����. � �

�, �� Tivoli Access Manager Runtime �� � ��� ��� � ����.

���� ��: � � �����.

1. /opt/PolicyDirector/etc/pd.conf ���� ssl-io-inactivity-timeout

� 0�� ������.

2. /opt/PolicyDirector/etc/pdmgrproxyd.conf ����

[aznapi-configuration] �� �� � ��� �����.

azn-app-host = proxy_hostname

�� proxy_hostname� Proxy Server ���� ��� ����.

3. pdconfig ���� ��� Policy Proxy Server� �� �����.

4. ���� � �� ���� �� ��� �� �����.

5. Policy Proxy Server� �� ������.

32 IBM Tivoli Access Manager for e-business: ���� ��

Page 51: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

ACL ��� ���� ��� ���(29961)

ACL ��� ��� IBM Directory LDAP Server, �� 4.1� �� ��� �

�����.

���� ��: � � �� /etc/slapd32.conf ��� � � �� LDAP

ACL ��� ���� ��� ������.

dn: cn=Front End, cn=Configurationcn: Front Endobjectclass: topobjectclass: ibm-SlapdFrontEndibm-slapdSetEnv: ACLCACHE=NO

Web Portal Manager� �� ������ ��� � ��(43847)

�� ���� � �� ����� Web Portal Manager� ��� � � ��

�� ��� �����. � �� � �� ��� �� ����.

WebSEAL ��

Tivoli Access Manager WebSEAL� ��� �� � �� � ����� ��

� � ����.

Active Directory(AD_LDAP)�� ��� �� WebSEAL� ��� �

��(43684)

Active Directory�� �� �� �� ��� WebSEAL� ��� � �

���. ��� ��� ��� ������. ���� �� ��� ��, �

� �� ����� ���� ������.�� �� ���� �����. �

� � �� UNIX �� ��� � WebSeal ���� Active Directory ���� �

��� � Windows ����� �����. ��� �� � �� �� ���

�� ��� ���� ��� ���� �����. ″� ��� � ��″�� ��

�� �� � � ����.

���� ��: Active Directory � policy �� Tivoli Access Manager � �

policy� ������.

��� �� ID ���� ��� ���� ��(IY30623, IY21308)

��� �� ID� ���� Tivoli Access Manager ��� Microsoft Internet Explorer

�� ���� ����. � �� � CIPHER ��� ��� ��� �� ��� �

����.

���� ��: ��� �� ID� �� � WebSEAL Server� � � ��� �

����.

� 3 � �� �� � ��� � 33

Page 52: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

1. webseald.confwebseald.conf �� ��� [ssl-qop] ��� �� ssl-qop-mgmt

����� �� ���� ���� ��� ������.

[ssl-qop]ssl-qop-mgmt = no

2. ���� pdweb_start ����� ��� � � ��

GSK_V3_CIPHER_SPECS �� ��� �� ��� ��� ����� �� �

�� �����.

GSK_V3_CIPHER_SPECS=04050A030609020100

3. ���� ��� ���� �� � WebSEAL� �� ������.

UNIX

# /usr/bin/pdweb_start restart

Windows

WebSEAL� �� ���� ��� ���� ������.

Solaris�� WebSEAL� SSL �� �� ��(43387)

UltraSparc Solaris ����� WebSEAL HTTPS SSL �� ��� ����

webseald.conf ���� use RSA �� ������.

UltraSparc� � Solaris ����� WebSEAL HTTPS SSL ��� ����

use RSA �� ��� ���. ��� ��, WebSEAL HTTPS ��� ��

�� ���� WebSEAL �� ��� ���� ����.

��� ���� ��� Red Hat Linux 3.0�� WebSEAL� ���

� �� � � �� WebSEAL ���(webseald)� ��� ��� �����.

WebSEAL� ���� � �� �� pdweb_start ����� ��� ����.

pdweb_start ����� webseald� ���� �� �� �� �� ��� ����

�. Red Hat Linux 3.0�� ����� LD_ASSUME_KERNEL �� ��� ��

���. � � LD_ASSUME_KERNEL� ���� �� webseald� �� �

�� ���� WebSEAL� �� � ����.

���� ��: Red Hat Linux 3.0�� WebSEAL� ���� �� pdweb_start

� ������. pdweb_start� ���� �� ���� webseald� ��� ��

LD_ASSUME_KERNEL� ��� � ��� ���.

export LD_ASSUME_KERNEL= ″2.4.19″

Linux ���� WebSEAL� ��� � �� ���� ���(44078)

Linux ����� WebSEAL� �� � � � �� �� ���� �����.

34 IBM Tivoli Access Manager for e-business: ���� ��

Page 53: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

error: cannot remove /var/pdweb/www/log - directory not emptyerror: cannot remove /var/pdweb/www - directory not emptyerror: cannot remove /var/pdweb/log - directory not emptyerror: cannot remove /var/pdweb - directory not empty

���� ��: � �� ���� �����. � ���� ���� �� � �

���.

�� ���� ″�� ��� � ��″�� � �� ��(44086)

″� ��� �� ��″��� �� ���� ″� �� �� ��″� �� ���

����. �� ��,

"�� �� ��� �� ��� �� ��� �������."

�� ����

� � �� ��� ���.

"�� �� ��� �� �� �� ��� �������."

�� ��� ��� �� ��� ���� ��� ��(44083)

WebSEAL� server task remove � � �� ��� ���� � � ����.

�� <server-id>�� �� �� ��� <server-UUID>�� ��� ���. ��

��� ��� IBM Tivoli Access Manager for e-business Command Reference

� ������.

�� �� �� �� ��� �� �� ���� ��(44084)

su-admin� ��� ���� � �� ��� � ��� �� � ��� ��

�� ����. ��� �� � ��� ���� �� � ���� �� ����

���� ����.

��� ��� �� ����� ���(44088)

��� ��� prompt_as_needed� ���� �� � ��� ���� ���

��� ��, ��� POP� ��� �� ����, ��� ″���� ��″��

� �� ���� �� �� ��� ��� ���� �����.

� ��� ���� BASE HREF ��� ���� ��(44090)

WebSEAL �� ��� preserve-base-href� yes� ���� �� � ��� �

����.

HTML ���� BASE HREF="http://server.ibm.com/"� �� BASE ��� �

� �� �� /jct� server.ibm.com� ���� WebSEAL� HREF� /jct/�

���� BASE ��� BASE HREF="https://webseal/jct/"� �����.

� 3 � �� �� � ��� � 35

Page 54: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

��� HTML ���� <BASE HREF="http://server.ibm.com">� �� �� �

��� �� BASE ��� �� ��, �� ���� �� ��� �� /jct�

server.ibm.com� ���� WebSEAL� HREF� /jct� ���� jct� ��

��. � ��, BASE ��� <BASE HREF="https://webseal/">� �����.

WebSEAL ��� ���� ����(44095)

help � � �� � ���� ��� ���� �����. help � �� IBM

Tivoli Access Manager for e-business Command Reference� ������.

��� ����� wsadmin ����� �� WebSEAL �� ����

���(44100)

WebSEAL� ��� � wsadmin ������ ��� � �� � �� ���

� ��� �� �����.

Unable to load shared library ’<libname>’

Unable to resolve symbol ’<symbol>’ from shared library ’<libname>’

� �� ���� ��� ����� ��� IBM Tivoli Access Manager for e-business

Problem Determination Guide�� ����� �� ����. ��� �� � ID

�� � ���� ���, wsadmin ������ ����� ��� � �� ��

��. � ������ � ��� ��� ���.

UNIX

/opt/pdweb/lib

Windows

C:\Progra~1\Tivoli\PDWeb\bin

���� ��: � �� � ����, WebSEAL� �� ���� WebSEAL�

���� ��� ��� �� ����� ������ �����. � ���

wsadmin ������� �����. ������ ��� � �� ��� ��� �

�� ��, �� �� �� ������ ��� � � �����.

AMWebARS �� �� ���� �� � �� ��� �� �� ��

� ���(44134)

�� � �� ����� �� AMWebARS ��� �� ����� � webseald

log ��� ���� DynADI �� �� ��� 1005b3b2���. � �� ��� �

� Tivoli Access Manager ��� �� �� �� �� �� � ���� �

��� � ��� � ����.

���� ��: � ��� ��� ��� ��� � ���� �� ���� ��

����.

36 IBM Tivoli Access Manager for e-business: ���� ��

Page 55: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Active Directory� �� ���� ��� � ���� WebSEAL� ��

� � ��(44386)

WebSEAL� � ���� �� � ����.

v UNIX ���� Active Directory� �� ������ ��� �

v Windows ���� Active Directory� �� ������ ��� �� WebSEAL

���� Active Directory ���� ���� � �

IBM Tivoli Directory Server� �� ������ ��� ���� �� � ��

�� ����.

WebSEAL� ��� ���(44082)

webseald.conf ��� accept-client-certs = optional� ���� �� � �

��� ��� ���� � ��� ������ SSL ��� ���� �� ��

� ��� ��� WebSEAL ���� � �� ���� � ���� �� �

�� � � ����. � �� � ������ ���� ����� ��� ��

��� �� ��� �� �(�: ���� � � � )�� �����. ����

�� ���� ���� �� ���� �� � ���� ����.

���� ��: ���� ��� ���, ������� ����� ���� �

� �� �� �� ���� � ����. � � ���� �� ���� ���

� ����. ���� ��� ������ �� ���� ���� ����.

� ��� ���� ��

��� ����� ��� �� � �� �� ����� ��� � ����.

�� ��� URL� Explorer � ��� ���� ��(37028)

BA � ��� �� ���� ��� ��, � ���� �� ��� ���� ��

� �� ��� Internet Explorer 6.0 ����� �� ��� � � �� URL

� �� � ����.

� ��� Internet Explorer 6.0� ���� ����� ��� �� ���� URL

� ��� ��� �� ����.

����� ��� ��� �� �� �� ��� �� ���� ���

(39896)

�� 2�� �� � ���� -options-record �� -options-template� ���

� ��� ��� �� ���� ��� ��� �����. � �� � �� �

�� �� ����.

� 3 � �� �� � ��� � 37

Page 56: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

���� ��� � ��� FSSO(Forms Single Sign-On)� �� �

�� ��(39924)

�� ����� FSSO(Forms Single Sign On) ����� <script> ��� �

��� ���� ����. Access Manager ��� ��� �� ��� FSSO� �

�� ���� ����. <forms> �� �� �� HTML�� �����.

Windows ��� ������ ����� �� ���� � ��� ID� ���� Service Unavailable ��� ���(42351)

Windows 2003 ��� ������ Microsoft IIS� IBM Tivoli Access Manager

for e-Business Plug-in� � �� ��, ����� �� ����� �� ID

� ��� ����� IIS� ��� ���. � ID � ��� ���� � ���

, ����� �� ���� ��� �� ���� URI� �� �� �� 503

Service Unavailable ��� �����.

���� ��: Windows 2003 ��� ���� ����� � �� ID � ��

� ����� IIS� ������.

v NETWORK SERVICE

v LOCAL SERVICE

v LOCAL SYSTEM

v <domain>\IWAM_<domain>-<machine>

�� Windows 2003 ��� ���� ����� ����.

SPNEGO ��� Active Directory ���� �� ���� ������

�� �(41078)

��� ���� ����� Internet Explorer ����� ��� ��, SPNEGO�

��� ����� Active Directory ��� �� �� ����� ��� ��� �

���. �� ��, SPNEGO ��� ��� � � � �� �� � ��

�� ��� �� ����� �� ��� ���� ���� ���� ����. �

����� �� ��� �� ����.

Microsoft IIS Plug-in�� ������� �� pdwebpi.conf � ��

(44361)

Tivoli Access Manager Microsoft IIS Plug-in� ������� �� � � ��

pdwebpi.conf ��� ��� ���.

1. pdwebpi.conf ��� ������.

2. iis ��� �����.

3. map-ba-users-to-anonymous ��� �� ������.

38 IBM Tivoli Access Manager for e-business: ���� ��

Page 57: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Microsoft IIS Plug-in� ������ � ��� �� �� ���� � � ���

�.

��� �� � ��� �� URL� ��� ��(44209)

Microsoft IIS 6.0�� Plug-in for Web Server� �� �� ��, ���� ���

��� ��� ���� ���� . �� �� , � ��� ��� ��

pagerror.gif� ���� ����.

<body bgcolor=white><table><tr><td ID=tableProps width=70 valign=top align=center><img ID=pagerrorImg src="pagerror.gif" width=36 height=48>

� �� � ���, �� ��� ���� �� ���� ����� ���

���. �� ��, �� ��� ��� � � ����.

<body bgcolor=white><table><tr><td ID=tableProps width=70 valign=top align=center><img ID=pagerrorImg src="/pagerror.gif" width=36 height=48>

Apache Web Server �� � ��� ��� ���� �� ���� �

��(44273, 44286)

Apache Web Server��, ����� ���� ��� ��� � ���� ��

��� ���� ���� �� �� �����. ��� � �� ��� ��

�� ��� ��� ��� ����. ��� �� ��� ���� ��

� ������ �� �� ����� ��� ���� ��� ����� ��

�� � ����. �� ��� �� ��� � � ��� �� ����� ��

�� �� �� �� ��� ���� �� ���� 403 � �����.

IBM Tivoli Directory Server ��

zSeries� Linux� IBM Tivoli Directory Server �� 5.2 ��(44406)

IBM Tivoli Directory Server �� 5.2� zSeries� Linux� ���� �� ��, Tivoli

Access Manager ����� � � IBM Tivoli Directory Server� ���� �

� �� � ���� ibmslapd.conf ��� ���� ����. ��� IBM Tivoli

Directory Server� ��� ��� ����� ���� �� ��, ibm-slapdSetenv

���� � ����� ���� �� �� � ����. � �� � ����

ibmslapd.conf ��� � � �����.

ibmslapdSetenv: LDAP_MAXCARD=NO

� � ��� ��� ���� �� ibmslapd.conf ��� �����.

� 3 � �� �� � ��� � 39

Page 58: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

dn: cn=Front End, cn=Configurationcn: Front Endibm-slapdACLCache: TRUEibm-slapdACLCacheSize: 25000ibm-slapdEntryCacheSize: 25000ibm-slapdFilterCacheBypassLimit: 100ibm-slapdFilterCacheSize: 25000ibm-slapdIdleTimeOut: 300ibm-slapdSetenv: DB2CODEPAGE=1208ibm-slapdSetenv: LDAP_MAXCARD=NOobjectclass: topobjectclass: ibm-slapdConfigEntryobjectclass: ibm-slapdFrontEnd

pdadmin� �� � � Directory Server� �� ���� TivoliAccess Manager ��� ���� ��(43951)

IBM Directory Server 4.1� ��� ��, pdadmin �� �� �� � Directory

Server� �� ��� pdmgrd ����� ���� ����. � �� � IR50309

�� ������(IBM Directory Server 4.1� ��).

���� ��: IBM Tivoli Directory Server� �� �� � ������.

Tivoli Access Manager ��

Tivoli Access Manager� ���� �� ��� � �� �� � ����� �

� ����.

SSL� ��� �� � LDAP Server � ����� ���� �(18832)

Tivoli Access Manager ��� �� ����� �� �� ��� SSL� ���

��, ��� ��� �� � � �� � �� SSL� ��� ���.

���� ��: �� ��� �� � � ���� SSL� ������.

pdadmin object delete � � ���� ��� � ��(27173)

pdadmin object delete � � ��� ����� ��� ����� ��� �

��� ����. ��� ��� ����� ��� �� ��� ��, ����� �

� ����� �� ���� ��� � ����. �� ���� �� ���� ��

� ����� �����.

���� ��: ispolicyattachable �� ��� ����� ������. ���

���� �� ����� ���� pdadmin objectspace delete � � ����

��.

40 IBM Tivoli Access Manager for e-business: ���� ��

Page 59: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

��� �� � � � �� �� ��� � ��(24411)

ivmgrd.conf �� ��� [ssl] ���� ssl-auto-refresh ��� yes� �

�� pdmgrd ��� � �� � � �� ��� ���� ����. � �

��� ��� �� ��� ���� �� ���� � �����.

LDAP��� ���� � �� ���� ���� Policy Server ����

�(28114)

IBM Tivoli Access Manager Upgrade Guide� ��� ��� �� ��� ��

��� ���� ��� ��� Policy Server� �� 5.1� ������� �� IBM

Directory Server �� iPlanet Directory Server� �� LDAP �� ������

��� ���� �����. � ��� �� ������ ��� ��, �� ��

� ����� ����� ��� Policy Server� �� 5.1� ���������.

�� ��� ��� � Windows�� Policy Server � AuthorizationServer� ���� ��(IY34142)

��� ��� ��� ��, Microsoft Windows ����� Policy Server �

Authorization Server� ���� ���� � �����. �� ��, ivmgrd.conf

�� ��� � � �� ��� ��,

logaudit = yeslogcfg = audit:pipe path=d: /log_test/pipelog1.exe

Policy Server� ���� � ����, � � ��� �� ���� msg_warning.log

�� ��� PipeLogAgent.cpp� �����.

0x000001e4 ��� ����� ��� � ����.

���� ��: ����� ����� ���� Policy Server � Authorization

Server� ������. � � �� �����.

1. � → �� ���.

2. � �� �� �� ��� � � � ��� Policy Server� �����

�� ����.

pdmgrd -foreground

3. �� �� �����. �� ��� �� , Authorization Server� ����

��� ���� � � � ������.

pdacld -foreground

�: -foreground � -version� �� ����. � �� pdmgrd �� pdacld

� �� Windows ����� �����.

� 3 � �� �� � ��� � 41

Page 60: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Tivoli Access Manager �� 5.1� �� ����� ��� Java ��

���� ��� ���(24996)

Tivoli Access Manager �� 5.1� �� ���� Tivoli SecureWay Policy Director

�� 3.8 ADK� ��� pdperm.jar �� �� Tivoli Access Manager �� 3.9

Java Runtime Environment� ���� Java ������ ��� ��� ���.

� ��� ���� Tivoli ��� IBM Customer Support� ������.

Solaris��� Policy Director ������ �� ��� �

Sun Solaris � ���� Tivoli SecureWay Policy Director �� 3.8 ADK� �

�� ��� ������ Tivoli Access Manager ������ ��� ��

��� ���. �� ���� � ��� �����. � ��� ����

���� �� �� ����� �������.

AIX�� ���� ���� � ��

�� ���� ����� ��� ��� IBM AIX �� 5.1� ��� � ����

�� ���� Policy Server� � �� ��� ���� � �� �� � �

���. ��� � � ���, � ��� � ���� �� ���� �����

Tivoli Access Manager Policy Server� ������ ��� ���� �� � �

���. �� � � � �� �� ���� �� ������ Policy Server ��

� ��� ��� � ����.

��� ����� ��� ����� ��� ����.

� �� � ��� � ��� �� ��� ��� ���� ����. � ��,

� ��� � �� ��� �� ���� � AIX ���� ����.

v � ��� Authorization API Sever � Policy Server

v �� ��� Authorization API Sever � Policy Server

v �� ��� Authorization API Sever � Authorization Server

v pdadmin ��� � Policy Server

v �� API � Policy Server

v Policy Server, �� Authorization API Sever(�: Authorization Server) ��

WebSEAL

v svrsslcfg ��� � Policy Server

���� ��: PD_FIXED_CLIENT_IP �� ��� AIX ����� �� ���

��� IP ��� ������. � 192.168.51.79� �� ��� �� ��� �

�� ���.

route � � ���� ��� �� ��� ���� ��� � �� � ���

� �� ��� �� ��� ���� ���� � � ����. �� ��, ���

42 IBM Tivoli Access Manager for e-business: ���� ��

Page 61: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� � �� ���� �� �� �� ��� ����� �� �� ������

� � ����. � ��� �� ��� �� �� ��� AIX ��� �����

�.

���� ��� �� IBM HTTP Server �� ��� (19559)

IBM HTTP Server mod_dir ��� ��� ���� �� ���� ����

��. ��� �� ���(/)� ����, � ��� ���� ��� ������

redirect(HTTP �� 302)� ���.

���� ��, � ��� ��� ������ �� �� URL(�� ��,

http://server/dirname)� � ���� � mod_dir �� URL

(�: http://server/dirname/)� � ����� ���. ��� ������ �

� ��� �� ����� ���� � ����� ���� � � ���� ��

� ���� ���.

�� IBM HTTP Server mod_dir ��� ���� ������ � ��� ���

� ����. ��� � ��(���� ��� ��� POP � ���� �� ��

�� URL ���)� ������ ����.

��, �� �� ��� �� ����. �� �� ��� ��� �� ����.

HTTP �� ��� �� ��� ��� (20633, 20631, 20735)

��� �� ��� ���� � HTTP ��� ��� �� �� ���� �

� � ����. ″���� ��″ ����� �� ���� Tivoli Access Manager

��� policy� �� � �� � � �����.

�� ���� ���� ��� policy� ���� ����� �� �� ����

� � ���� ����. ������ ��� ����� �� ��� ��, �

��� ����. ��� �� �� ����� � �� ���� �����.

��� �� ��� POP� ��� ���� ��� http://servername/

directory� ����� ����.

� � � � � � � � � � � � � � � � � � . � � � � � � � � �

http://servername/directory/index.html� �� ������(�� ��� ��

http://servername/directory/� �� ���).

������ � URL�� GET� �� �� ���� ����. ��� POP�

���� ����� �� ��� ���� � ���� ����. ��� ����

�� ��� ����� ���� �� �� ����� � � ��� �� ��

� � ����.

� 3 � �� �� � ��� � 43

Page 62: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

��� ��� �(�� ����� �� � � �� � �� ��� ���

��)�� �� ���� ��� �� ����.

�� ��� �� ������ �� �� ����� ��� � �� ���� �

����. � ����� �� ���� �� ��� ��� �� ������.

� ��, �� �� ���� ���� �� ��� � � ��� �� � ��

���� �� � ����.

WebSphere Application Server� Tivoli Access Manager� � �

��� HP-UX�� ���� ��(28015)

WebSphere Application Server 4.0�� WebSphere ��� ��� �� WebSphere

������ ���� �� � ���� ��� ���� ����. IBM Tivoli

Access Manager for e-business IBM WebSphere Application Server �� ���

��� Tivoli Access Manager� ��� �� ��� �� ������ ��

� �� ���� � �� �����. ��� ���, WebSphere Application

Server ��� HP-UX ����� WebSphere ������ ���� �� � �

���. �� ��, �� ������ ��� �� ��� �� ��� Tivoli

Access Manager for WebSphere Application Server� ��� � ����.

���� ��: �� � ���� WebSphere ��� �� � ����. ���

� � �� ��� ��� IBM Tivoli Access Manager for e-business IBM

WebSphere Application Server �� ���� ������.

� � ��� BEA WebLogic Server� ��� � ��

java.lang.OutofMemoryError ��� �����.

� �� Tivoli Access Manager for WebLogic Server �� �� � BEA

WebLogic Server� � �� ���� � � ����.

���� ��: startWebLogic ������ JVM(Java Virtual Machine)� �� �

�� �� �����. �� ��, � � ����.

%JAVA_HOME%\bin \java -ms64m -mx128m

��� ����� � �� ��� �� ���� � � ����� ��� ���

� � ���� � ��� ��� BEA �� ��� ������. �� ��� �

�� � ��� ���� ������ ���� ���. ��� � � � ��

� �� �� �� ����� � URL� ������.

http://edocs.bea.com/wls/docs61/perform/index.html

44 IBM Tivoli Access Manager for e-business: ���� ��

Page 63: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Microsoft �� �� �� � Policy Server ��� ��� � ��

(43306)

�� Active Directory �� ���� Microsoft �� �� ��� ��� � Active

Directory ���� �� URAF ���� ��� � �� ��� Tivoli Access

Manager Policy Server ��� ��� � ����. �� ��� � �� ����

�� ��� �����. � ��� ����� ��� �� Microsoft �� ��

��� MS03-026(KB823980) � MS03-039(KB824146)���.

���� ��: � �� � ��� ��, �� � ��� ��� ��� Microsoft

�� ��� �� �����. �� � , Policy Server� ���� Microsoft ��

��� �� ������.

�� ��� �� �� �� Active Directory� �� ��� ���.

Microsoft Internet Explorer� �� �� � ��� ��� ��� �

� �� ���(43398)

Internet Explorer� �� ��� ��� ���� �� ��� �� �� ���� �

� �� �����.

�� ��, https://web.server.com:444/� � https://web.server.com/� �

� ����� �� �� �� Internet Explorer� �� � �

web.server.com:444� ��� � � � � �� �����.

���� ��: ��� IP ��� �� �� ��� �� ��� � ��

��� ��� �� �� ������.

Authorization Server(pdacld)� �� �� ��� ��(43511)

���� ����, Java �� API� �� �� � � ��� ���� Authorization

Server(pdacld)� �����. ��, �� �� �� AZN ������ �� ��

� �� ��� �����. �� �� �� Authorization Server� ��� �

�� policy� ��� ��, � ��� ��� Authorization Server� ���

���. �����, Authorization Server� ������ �� ��� policy ��

��� ��� � ����. ��� policy� � � ����, �� �� pdadmin

� � ��� Authorization Server� securitygroup� �� ���. �� �

�, � � ����.

pdadmin> group modify securitygroup add ivacld/<machine_name>

�� �� ivacld.conf ��� ����.

�� ���� �� ��, Authorization Server� ��� policy(�: ��� ��� �

� ��)� ����� �����. ��� ��� � �� �, Authorization Server

� 3 � �� �� � ��� � 45

Page 64: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� ���� ��� ���� � ����. pdadmin �� � ����� ����

��� �� ��� ��� ���� Authorization Server� �����.

�� ��� Authorization Server �� ��� � ��� � ��� ���� �

��� �� ��� � ���.

Windows ��� � �� �� ��� ���� WebSphereApplication Server� Tivoli Access Manager� �� ��� � � �

���� ���� ���� ��(43612)

Microsoft Windows ���� � �� �� ��� ��� IBM Tivoli Access

Manager for WebSphere Application Server� �� ��,

c:\Program Files\Tivoli\amwas ���� �� ��� ��� ��� �

� ���� ����.

���� ��: IBM Tivoli Access Manager for WebSphere Application Server�

�� �� � ���� c:\Program Files\Tivoli\amwas ���� �����

�.

�� �� �� �� ��� �� ��� �� ���� Tivoli AccessManager Java Runtime Environment� ��� ���(43896)

Tivoli Access Manager Java Runtime Environment(PDJRTE)� �� �� ���

� �� � � �� ��� �� ��� ��, ��� ��� ����� ��

��.

���� ��: PD.properties ��� ��� � � �� ��� �� ��

�� Tivoli Access Manager Java Runtime Environment� �� �� � ��

������.

Tivoli Access Manager Runtime Environment �� �� � �� ��

�� ���� ���(43904)

Tivoli Access Manager Runtime Environment �� � � �� �� ��� ���

��� ��, rpm � � �� ���� � ��� �� � ��� �� ���

� �����.

���� ��: ��� ��� ����. ��� ��� �� �� � �����

��� � ��� ��� ��� � ���� �� ����.

Tivoli Access Manager� �� �� � �� ��� ���� � �

��(43933)

�� ������ LDAP� ��� ��, Tivoli Access Manager� LDAP Server

� ��� �� ��� LDAP ��� ��� �����. �� � , Tivoli Access

46 IBM Tivoli Access Manager for e-business: ���� ��

Page 65: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Manager� � ��� ��� ��� �� � �� ��� ����. � ���

���� ���� �� �� � Tivoli Access Manager� �� � �� ���

��� ��� ����. Tivoli Access Manager� ��� �� � ���� �

� ��, ��� ���� ��� ACL(Access Control List)� �� Tivoli

Access Manager�� � ���� ��� � �� ��� ��� � � ���. �

� ��� ��� IBM Tivoli Access Manager �� �� ���� ���� ��

��. ACL� �� � Tivoli Access Manager� � ��� �� �� � ���

��� � ����.

�� �� ��� ���, Tivoli Access Manager� �� ��� �� ���(�

� � LDAP��� ��� ���) �� �� � ��� ���� ���� ��

��. � ��� �� �� �� ��� ���� ��, Tivoli Access Manager

� ��� �� ���� �� � � ���� � ��� ��� ��� ����.

���, �� �� ��� � ��� �� ������ �� ��� �� ��� �

�� Tivoli Access Manager� �� ���� ��� �� ����. �� ��, �

� �� �� ��� ��� ����.

c=nodc=DnB,dc=no

� � �� � ���� ��

dc=postbanken,dc=no

� ��� �� ��� ��� � ��� ��� ACL� ��� ��� � ���

�� ���� Tivoli Access Manager� �� ��� ��� �� ����� ��

��� � ����. �� ��, Access Manager� �� ��� �� �� ���

�� �� � ����. �� ��� ��� ��� �� ���� Tivoli Access

Manager� �� ��� ���.

SvrSslCfg ��� �� ��� �� �� ���� ���(43701)

� � �� �� ��� Java SvrSslCfg ���� ��� �� � � �� �

�� �����.

HPDJA0809E ��� �� �� ���� ��� ��� � ����.

�� � � �� ������. �� ���� � � �����.

HPDJA... ��� �� �� ���� ��� ���� � ����.

� �� � �� ��� �� ����.

� 3 � �� �� � ��� � 47

Page 66: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ���

� Policy Server(pdmgrd) � Authorization Server(pdacld)� ���

���(36687, 37558)

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server

� ACL ��� ���� � ��� � ����.

���� ��: Tivoli Access Manager� ���� �� ivmgr ��(�� �� �

�)�� LDAP SSL � �� � � � ��� ���� � � �� ��� ��

� � ����.

Tivoli Access Manager for WebSphere Application Server ���

��� ��� ����� ������� ��� � ��(28418)

Tivoli Access Manager for WebSphere Application Server ����� ���

� migrateEAR�� � ��� �� ��� �� �(DN) ��� ���

�. DN� ��� �� ��� ���� �� ��, UNIX � � ���� � �

��� �� �� � migrateEAR ���� �����. �� ��, � ��

�� �� ��(o=)�� ��� �����. o=Sales Division,c=us

migrateEAR � � Java � ��� ���� � ����. Java � � �

� ��� � DN ���� ����� �� DN� � �� �� �� � �� �

����. �� ��, WebSphere Application Server� /opt/WebSphere/AppServer

���� ���� ��� ��� ��, � � DN� �� ��� ″o=Sales

Division,c=us″� � � ��� � ���.

��� Java � � IBM Tivoli Access Manager for e-business IBM WebSphere

Application Server �� ��� �� A� migrateEAR �� ���� ���� �

���.

WebSphere Application Server��� ������ �� ��(21935)

����� ���� migrateEAR�� � ��� ��� � ����.

"��� �� ID� ���� ����."

/opt/WebSphere/AppServer/java/jre/bin/java \-Dpdwas.lang=/opt/WebSphere/AppServer/lib:/opt/pdwas/nls/java \-cp /opt/WebSphere/AppServer/lib/xerces.jar:/opt/pdwas/lib/migrate.jar:/opt/pdwas/nls/java \com.tivoli.pdwas.migrate.Migrate -j /opt/WebSphere/AppServer/config/your_application.ear \-a sec_master -p sec_master_password -w wsadmin -d "o=Sales Division,c=us" \-c file:/opt/WebSphere/AppServer/java/jre/PDPerm.properties

�� 1. migrateEAR ��� ��� �� �� Java �

48 IBM Tivoli Access Manager for e-business: ���� ��

Page 67: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

WebSphere Application Server�� ����� ��� ������ �� ����

� ������ ��� ��� �� ��� ��� � ����. � �� ���

migrateEAR ���� � Tivoli Access Manager �� ��� ������

��.

��� WebSphere ��� ��� LDAP �� ������ �� WebSphere

�� ��� ������ ����. �� ������ ��� ��(EAR)� �

�� ��� � ����. � ��� ��� �� � �� �� �(DN)� ��

��. ����� ���� EAR ��� � ��� ��� �����.

����� ���� �� ��� ���� XML ��� �����. �� � �

�� ���� ″�″ �� ��� ���� ���� � ��� ������.

XML ��� �� � � ����.

ibm-application-bnd.xmi

�� ��, �� ��� � � �� ��

.....<groups xml:id="Group_1" name="customer, o=ibm, c=gb"accessId="group:server1.uk.ibm.com:3899/cn=customer, o=ibm, c=gb"/>.....

� � �� ��� ��� ������.

.....<groups xml:id="Group_1" name="customer"accessId="group:server1.uk.ibm.com:3899/cn=customer, o=ibm, c=gb"/>.....

�� ���� � Tivoli Access Manager ���� ��� �� ���

��� ��� ���(43748)

AMWAS� � AM ����� AM ���� �� �� �� �� � �����

��� � � ������� �� migrateEAR4 � migrateEAR5 ���

� -b �� ����.

���� ��: WAS ����� �� ��� AM ���� ��� �� ��

� ������� migrateEAR ���� ��� � -b �� ������.

������ ��� ACL� ������� ��� � � �(44245)

� ��� ���� ��� ACL� ��� ��, ACL� ��� � �� ���

����� ��� ��� � ����. ��� ����� ��� �� � ��

�� ����. � �� � ����, ������ ����� ACL� ��

�� ��� �� �� ���� ����.

� 3 � �� �� � ��� � 49

Page 68: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

������ ��� policy� ������� ��� � �(44410)

����� ��� ″����� �″�� ���� ��� �� policy� ��

����� ��� � ����. ������ �� �� policy� ������

��� ���� pdwas_migrate.log ��� ����. �� ��� ��� �

����� ��� ���� � � �����. ��� �� ���� � �

����� ��� ������. �� � ��� ����� ��� �� �

����.

UNIX � ���� pdbackup � � ��� � � ���� ���

(44285)

UNIX �� ����� pdbackup � � �� � � ���� �� � ��

��.

sh[2]: ./var/PolicyDirector/log/msg__pdmgrd_utf8.log:0403-006 Execute permission denied.sh[3]: ./var/PolicyDirector/log/msg__pdmgrd_utf8.log:0403-006 Execute permission denied.

� ���� �� � ����. msg__pdbackup.log ��� ��� � � �

�� � � ������ � � ����. pdbackup � � � ��� �

��� � �� �� ��, ��� ��� ����.

pdwascfg �� � jlog.properties �� ���� ��(44410)

-action_type local �� �� pdwascfg � � ��� WebSphere Application

Server� ��� jlog.properties ��� ���� �� � ����. ��� �

��� ����, jlog.properties.template ��� WebSphere Application Server

� ���� �� etc ���(PDWAS_HOME ������ �)�

jlog.properties� �����.

zSeries� Linux� WebSphere Application Server ��� ���

(44540)

zSeries� Linux� WebSphere Application Server� �� Tivoli Access Manager

� ��� �, � � WebSphere Application Server 5.02 ���� ��� � ��

� ��� ��� � ��� SystemOut.log� � � ��� ��� �����.

org.xml.sax.SAXParseException: Element type "properties" must be followed byeither attribute specifications, ">" or "/>".at org.apache.xerces.parsers.AbstractSAXParser.parse(AbstractSAXParser.j

� ��� /opt/WebSphere/AppServer/config/cells/hostname/security.xml �

�� �� ���(>)� ��� ��� � ����.

50 IBM Tivoli Access Manager for e-business: ���� ��

Page 69: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

��� ���� � � �� � �� � �� ‘>’� �����. �� ‘>’

� ��� �� �������. (��: � � ���� ��� � �� ����

�.)

<properties xmi:id="Property_1067638223188"name="com.ibm.security.useFIPS"value="false"/><properties xmi:id="Property_222"name="com.ibm.websphere.security.authorizationTable"value="com.tivoli.pdwas.websphere.PDWASAuthzManager"/></security:Security>

Tivoli Access Manager� �� ��� �� �� Java �����

� ��� � NoSuchMethodErrors� ��� � ��

��� �� ��� �� Tivoli Access Manager Java Runtime� � ����

� ���� ���� Java ������ Tivoli Access Manager �� 5.1 Java

Runtime� � � � Java NoSuchMethodError� ������.

public static void createPop(PDContext context,String id,String description,com.tivoli.mts.PDAttrs attributes,PDMessages messages)

public static void createAcl(PDContext context,String id,String description,HashMap aclEntriesUser,HashMap aclEntriesGroup,PDAclEntryAnyOther aclEntryAnyOther,PDAclEntryUnAuth aclEntryUnAuth,com.tivoli.mts.PDAttrs attributes,PDMessages messages)

public static void createProtObject(PDContext context,String id,String description,boolean isPolicyAttachable,String aclId,com.tivoli.mts.PDAttrs attributes,PDMessages messages)

� �� � �� ��� �� �� ���� � ���� ��� ��� �

����� �� ���� ����. ���� ��� datatype com.tivoli.

mts.PDAttrs ��� datatype com.tivoli.pd.jutil.PDAttrs ��� ���.

��� �� �� Tivoli Access Manager �� 5.1 Java Runtime� �� ����

��� �� ���� ���� Java ������ ��� ��� ���. �

��� ���� Tivoli ��� IBM Customer Support� ������.

� 3 � �� �� � ��� � 51

Page 70: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

52 IBM Tivoli Access Manager for e-business: ���� ��

Page 71: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 4 � ��� �� ����

� ���� IBM Tivoli Access Manager(Tivoli Access Manager) ��� � �

�� ��� ��� ���� ��� �� ��� �����.

��� ��� � ���� ��

� � �� � ����� � ��� Tivoli Access Manager ���� �� �

� �����. �� �� ��� �� �� ��, ��� ���� ����.

�� ���� �� � ��� ���� ����. � �� � Tivoli ��� IBM

Customer Support� ������.

�� ��� Tivoli Access Manager� ��� �� �� � 25 ���� � 3 �

��� �� � ��� ���� �� � ����.

Red Hat Linux 7.1� � ��� �� ��� ��� �� ���

� ��� � ���� � �� Red Hat Linux 7.1 ���� Tivoli Access

Manager� ���� �� ��� ��� ���.

v ���(eucjp, ja_JP.eucjp)

v ���(zh_TW)

/etc/ld.so.conf ��� ���� � � �����.

/usr/lib/gconv

��� ��� iconv � �� �� ������ ���� � ��� �� �

�����.

Active Directory� ���� DBCS ����� �� �� �� � ��

(44415, 44312)

pdadmin group list � user show-groups � � ��� ��� Active Directory�

�� ������ ���, DBCS ������ ���� �� �� �� � �

���.

Linux ������ �� �� � �� ��� ���

Red Hat Linux ����� ���� � ���� ��� � �� ��� ja_JP.eucjp

���. �� ��, � � ����.

LANG=ja_JP.eucjpLC_ALL=ja_JP.eucjp

© Copyright IBM Corp. 1999, 2003 53

Page 72: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�: ja_JP.eucjp� ��� ��� ���� ���� ������. �� ��,

ja_JP.eucJP�� ���� ���� �� ��� �� ���, ���� �

���.

��� SJIS� ���� ����.

Linux ����� �� ��� ��� �� ��

� ���� �� �� ���� ��� Red Hat Linux ����� Tivoli Access

Manager� ���� �� � �����. �� ��� EUC� ���(BIG5)�

����. ��� SJIS� ���� ����.

1. XWindows ���� ��� ��� � ���� Red Hat Linux� �����

�. X� ��� �, X� �����.

2. Tivoli Access Manager Runtime ���(PDRTE)� ������.

3. � �� ��� �� � ������.

# ./pd_lp

4. �� ���� ���� Policy Server� � Tivoli Access Manager Runtime

� ������.

��� EUC:

1. � � � �����.

# export LC_ALL=ja_JP.eucjp# export LANG=ja_JP.eucjp# rxvt -km eucj &

2. rxvt �����, pdconfig � � ��� �� ��� ���� ���

�� ����.

���:

�� ��� ���� �� � ���� ����. ��� ��� Red Hat

Linux� ���� �� ����.

1. � � � �����.

# rpm -i cxterm-5.1p1-2.i386.rpm# export LANG=zh_TW# export LC_ALL=zh_TW# cxterm -big5

2. cxterm�� pdconfig � � �� � �� ��� ���� �����

������.

cxterm ���� � ���� ����� � ����.

http://www.rpmfind.net/linux/RPM/contrib/libc6/i386/cxterm-5.1p1-2.

i386.html

54 IBM Tivoli Access Manager for e-business: ���� ��

Page 73: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� ���� � ���� ��� ���� ��(28420, 28422)

�� ��� ��� �� ���� � � ���� ����. � � �� ���

����.

v Policy Server SSL �� �� ��� ���� ���� ���� � � �

��� �����.

v ���� ��� ��� ��� � ���� ���� �����.

�� ��� ��� ��� ���� ���� ��(28453)

�� ��� ��� ���� � �� ��� �� ���� ���� �� � �

���. �� � ����, ���� ��� �� ��� �� ��� ������.

� ��� �� ��� �� �� ���� �����.

Windows� ��� LANG ��� ��� �� ��� ���

Windows ���� LANG ��� ���� ��, ��� �� �� ��� ���

��� �����.

� �� Windows ���� � � �� ��� ���� ���

(26899)

Microsoft Windows ����� ��� � (�: svrsslcfg, bassslcfg, mgrsslcfg �

pdjrtecfg)� ��� ��� �� ���� ��� �����. � ��� 1�� �

� ���� ���� �����.

��� �� ���� ��� ����� �� � � �����.

1. �� � � �� ���.

2. � � � ������.

chcp 1252

3. � ���� �� � �� �� ���.

4. Lucida Console �� True Type ��� ��� � ��� ���. � �

���� �� �� ���� �� �� ������.

�� � �� ��� � � ��� �� ���� ��� �����.

�� ��� ASCII �� �� �� ��(26985)

�� �� ASCII ��� �� ���� ����. Tivoli Access Manager� �

���� ���� ��� �����. � ���� Policy Server� ���� �

� ������ UTF-8(Universal Character Set Transformation Format-8)�� �

����. �� 5.1� ��, ���� azn-api ������ � ��� �����

�. WebSEAL� ��, �� �� ���� �� ��� � ����.

� 4 � �� �� ���� 55

Page 74: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

Web Portal Manager� ���� �� ���� �� ���� �

(IY32306)

Web Portal Manager ���� �� �� � �� ��� ��, ��� ���

� �� �� ���� �� ��� ���.

Java� ��� ��� ���� ��� ��(IY31894)

��� � ��� ���� �� �� ���� ���� ����. ���, �� �

� Java�� �� � � ���� � ��� ��� � � ����. ��

��, ��� ���� ��� �� JRE� ��� ���� X11.fnt.ucs.ttf ��� �

���. �� �� ��� �� �� � ��, JRE �� � �� ���� ��

����.

Policy Server� AIX �� � ��� ���(12584)

� ��� ��� ���� �����, Tivoli Access Manager Policy Server�

pdmgrd� ��� � ��� ���� � ��� �� ����. Policy Server

� ��� ���� �� ��, pd_start ���� ��� ���� �����

�.

pd_start start

2���� ��� �� ���� �� �� �� ���� ���� ��

(37601, 39896, 43907)

2�� � �� ����� -options-record �� -options-template� ��

� �� ���� � ��� ��� ��, ��� �� ��� ��� ���� �

����. �� �� ��� �� ����.

����� ��� ��� �� �� �� ��� �� ���� ���

(39896)

�� 2�� �� � ���� -options-record �� -options-template� ���

� ��� ��� �� ���� ��� ��� �����. �� �� ���

�� ����.

�� Windows ����� Plug-in for Web Server� �� ����

���(44565)

��� Windows ����� Plug-in for Web Server ��� �����.

���� ��: � ��� �� �� ���� ������.

c:\program files\tivoli\pdwebrtec:\program files\tivoli\pdwebpi

56 IBM Tivoli Access Manager for e-business: ���� ��

Page 75: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

���� � �� ���� ��� � ������� ��� ���� �

�(44080)

����� � �� ���� ��� � �� ������� ������ �����.

BEA WebLogic ��� ��� � �� ���� � � ���� ���

(44219, 44398)

BEA WebLogic ��� ���� �� � ��� �� ��� �� ���� �

�, �� �� ��� ���� �����. BEA WebLogic ��� ���� �

� JDK �� JRE� ��� ��, �� � �����. � �� � �� �����

���� � ��� ����. ��� � �� � ���� IBM JDK �� JRE

1.3.1� ��� � �� ��� install_amwls� �����.

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ���

� Policy Server(pdmgrd) � ACL ��(pdacld)� ��� ���

(36687, 37558)

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server

� ACL ��� ��� ��� � ����.

���� ��: Tivoli Access Manager� ���� ��, ivmgr ��(�� �� �

�)�� SSL � �� � � � ��� ���� � � �� ��� ��� �

����.

� 4 � �� �� ���� 57

Page 76: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

58 IBM Tivoli Access Manager for e-business: ���� ��

Page 77: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� 5 � ��� �� ��

� ���� IBM Tivoli Access Manager for e-business ������ �� ��

� �� ��� � �����.

IBM Tivoli Access Manager Upgrade GuideIBM Tivoli Access Manager Upgrade Guide� �� Tivoli ����� ����

�� http://www.ibm.com/software/tivoli/library/� White Papers ��� ���.

IBM Tivoli Access Manager Base Administration Guide(44534) ″Chapter 18. XML output for logging and auditing logs″�� 187 ��

�� � 8� �� <source> ... </source>� �� ��� � � ����. ��

� � � �� ��� ���.

Output Field Name Description

<source>...</source>

The source event can be one of the following:

cred Applies to any Tivoli Access Manager

component.

app Applies only to an authorization (azn)

component.

ruleADI

Applies only to the authorization (azn)

component when evaluating a Boolean

rule. The rule ADI value describes

Boolean rule access decision information

that may have been retrieved from the

credential, application, authorization, or

through an attribute retrieval service.

�: In product audit logs, if the dynADI value

is listed, it should be interpreted as ruleADI

instead.

IBM Tivoli Access Manager for e-business Authorization C APIDeveloper Reference

7 ���� ″Chapter 1. Authorization API overview″�� ��� ���� ��

�� � � �� ��� ���.

© Copyright IBM Corp. 1999, 2003 59

Page 78: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

IBM has tested the use of the IBM Tivoli Access Manager Application Developer

Kit (ADK) component with the compilers listed in the table below. Previous

versions of the compilers are not supported. Compilers on other supported platforms,

such as IBM AIX 5.1 or HP-UX 11i, have not been tested.

Operating system platform tested Tested compiler

IBM AIX 4.3.3 IBM Visual Age C/C++ 5.0.2

Sun Solaris Operating Environment 5.7 Forte 6.1 with patches 109505-11, 109508-09,

109510-06, 109513-11

Hewlett-Packard HP-UX 11.0-11.01.07 AnsiC/3.30 aC++

Red Hat Enterprise Linux for xSeries® GNU GCC 3.2.2

SuSE Linux Enterprise Server 8 for xSeries GNU GCC 3.2.2

SuSE Linux Enterprise Server 8 for S/390® and

zSeries

GNU GCC 3.2

SuSE Linux Enterprise Server 8 for pSeries® GNU GCC 3.2-32

Microsoft Windows 2000 Advanced Server Microsoft Visual C/C++ 6.0.5

IBM Tivoli Access Manager for e-business Administration C APIDeveloper Reference

4 ���� ″Chapter 1. Introducing the administration API overview″�� ���

���� �� �� � � �� ��� ���.

IBM has tested the use of the IBM Tivoli Access Manager Application Developer

Kit (ADK) component with the compilers listed in the table below. Previous

versions of the compilers are not supported. Compilers on other supported platforms,

such as IBM AIX 5.1 or HP-UX 11i, have not been tested.

Operating system platform tested Tested compiler

IBM AIX 4.3.3 IBM Visual Age C/C++ 5.0.2

Sun Solaris Operating Environment 5.7 Forte 6.1 with patches 109505-11, 109508-09,

109510-06, 109513-11

Hewlett-Packard HP-UX 11.0-11.01.07 AnsiC/3.30 aC++

Red Hat Enterprise Linux for xSeries GNU GCC 3.2.2

SuSE Linux Enterprise Server 8 for xSeries GNU GCC 3.2.2

SuSE Linux Enterprise Server 8 for S/390 and

zSeries

GNU GCC 3.2

SuSE Linux Enterprise Server 8 for pSeries GNU GCC 3.2-32

Microsoft Windows 2000 Advanced Server Microsoft Visual C/C++ 6.0.5

60 IBM Tivoli Access Manager for e-business: ���� ��

Page 79: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� A. Linux�� Tivoli Access Manager ������ ���

��� �

� ��� Intel™ ����� Red Hat Linux� ���� zSeries�� SuSE Linux

Enterprise Server� ��� IBM Tivoli Access Manager(Tivoli Access Manager)

������ ��� � �����.

v �� -lpthread� ��� ��

Tivoli Access Manager ������ ������ ������ ����� �

�� � �� ������. Linux �� ������ libpthread.so� libc

�� ����� ���� �� ��(�: fork())� �����. ��� ����

���� ������ ���� �� ��, �� ���� ����� -lpthread

� ���� � ��� ��� ��� ��� � �� ��� ��� � ���

�.

v ������� ��� ��

������ ���� ���� ��� ��, ��� ��� ��� ��� � �

���. �� Linux ���� ���� �� �� ��� 2MB���. � �� �

�� ����� ��� �� �����. �� ��, RAM� 256MB� ����

� ��� �� 128� ����� ���.

��� �� � ��� � � ��� �����.

– �� ��� �� ��� ��, pthread_create()� ��� � �� �� �

�� ������.

– �� ��� �� ���� �� �� � Tivoli Access Manager ����

� � �� ��, �� ���� �� ���� ���� ��� �� �

� ��� ��� ��� pthreads ������ �� ������.

© Copyright IBM Corp. 1999, 2003 61

Page 80: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

62 IBM Tivoli Access Manager for e-business: ���� ��

Page 81: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

�� B. ����

� ��� ���� ���� �� � ������ ��� ����.

IBM� �� ����� � � ��� ��, ��� �� ��� ���� �� �

� ����. �� ��� � �� �� � ���� �� ��� �� IBM ���

� ������. � ��� IBM ��, ���� �� ���� ���� �� �

IBM ��, ���� �� ����� ��� � ��� �� ����� ����. IBM

� �� ���� �� �� �, ����� ��� ��, ���� �� ����

�� ��� � ����. ��� �IBM ��, ���� �� ���� ��� ��

�� � �� ��� �����.

IBM� � ��� ��� �� �� ��� � ��� ���� �� �� ��

�� �� � ����. � �� ����� � ��� �� ������ � ��

�� ���. ����� �� ����� � �� ������.

135-270

����� � � ��� 467-12, �������

�� �.�.� ����

������

����: 080-023-8080

2��(DBCS) ��� �� ���� ��� �� IBM ������� ����

� ��� � ����� ���

IBM World Trade Asia Corporation

Licensing

2-31 Roppongi 3-chome, Minato-ku

Tokyo 106-0032, Japan

�� �� ��� ���� ��� �� ����� ���� ����. IBM�

�� �� �, ��� � �� ���� ���� �� ��� ��� ���

(�, �� ��� � ) ����� ����� �� ��� ���� � �� ���

���� �����. �� ����� �� ��� ��� �� ��� ��� �

��� ���� ����, � ��� ���� �� �� ����.

� ���� ����� ���� ���� ���� ��� �� � ����. � �

�� ����� ����, ��� ��� ���� �����. IBM� � ��� �

�� �� �(��) ����� �� ���� ���� �� �(��) ��� � ��

��.

© Copyright IBM Corp. 1999, 2003 63

Page 82: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

� ���� ���� �IBM� ���� �� ��� ��� ���, �� ��

�� �� ���� ���� �� �� ���. � ���� � �

IBM �� � ��� ��� � ��� ���� �� ��� �� ��

� ��� ���.

IBM� ��� ��� �� �� �� ��� ����� ���� ��� ��

� ��� ��� ���� ��� � ����.

(i) ����� ��� ����� � ����(� ���� ��) �� �� �� �

(ii) ��� ��� �� ��� ���� � ����� �� ��� �� �� �

��� ��� � ��� ������.

135-270

����� � � ��� 467-12, �������

�� �.�.� ����

������

��� ��� � ��(�� ��, �� � �)� �� ��� � ����.

� ��� ��� ����� � � ���� � �� ��� �� ����� ��

� IBM� IBM �� ��, IBM ���� ���� ��(IPLA) �� �� ��

� ��� �� ��� ����.

�IBM ��� �� ��� � ��� ����, �� �� �� � �� �

���� �� ����. IBM��� ��� �IBM ��� ����� �����, �

� ��� ��� ��� ���, ��� �� � ��� ��� ��� � ���

�. �IBM ��� ��� �� ����� � ��� ����� ������.

IBM� ���� �� ��� �� �� ��� ��� ���� �� � �

���.

� ���� ��� ���� ��� ���� � ���� �� ��� ��

����. � ���� ��� ���� ��� ���� � ��, ��, �� � �

�� �� �� � ����. �� �� � ��� ��� �� ��� �

� ��� ��� �� �� ���� �����.

� ��� ������ �� ���� �� � �� ���� �� �� ���

�.

� ��� �� �� � ���� ���� IBM Corporation� �� �� ��

�����.

64 IBM Tivoli Access Manager for e-business: ���� ��

Page 83: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

AIX

DB2

DB2 Universal Database

Domino

IBM

IBM ��

Lotus

MQSeries

OS/390

pSeries

S/390SecureWayTivoli

Tivoli ��

Universal Database

WebSphere

z/OS

zSeries

Microsoft � Windows� �� �� � ���� ���� Microsoft Corporation

� �����.

Intel� �� �� � ���� ���� Intel Corporation� �����.

Java � �� Java �� �� ��� ��� �� �� � ���� ���� Sun

Microsystems,Inc� �� �� �� �����.

UNIX� �� �� � ���� ���� Open Group� �������.

� ��, �� � ��� �� �� �� �� �������.

�� B. ���� 65

Page 84: IBM Tivoli Access Manager for e-business:publib.boulder.ibm.com/tividd/td/ITAME/GI11-4156-00/ko_KO/PDF/am51_rel... · Tivoli Access Manager for WebSphere Business Integration Broker

���

Printed in Denmark by IBM Danmark A/S

GA30-2206-00